⬇ Download holy card: ·
Saint ParaShells, Who Turned Root by Installing
Patron of virtual machines on the Mac, sockets open to everyone, and arguments injected on the sly.
Life
On 15 September 2026 Yuval Moravchick of JFrog described ParaShells, a local privilege escalation in Parallels Desktop for Mac. The prl_disp_service daemon runs as root and exposed a world-writable socket; abusing the appliance install, one could inject an argument into tar and have it run a chosen script as root. Any local account could thus become administrator.
Prayer
O Saint ParaShells, who from an ordinary user installs a root shell, let our privileged sockets not listen to whoever passes by. Amen.
How to celebrate
Celebrated by updating Parallels Desktop to 27.0.0 and checking who can talk to the services that run as root.
A socket open to all, root for the first to knock.