Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions.
- https://www.acronis.com/en-us/blog/
No PoCs found on GitHub currently.