A permissions issue was addressed with additional restrictions. This issue is fixed in visionOS 26. A malicious app may be able to gain root privileges.
https://thehackernews.com/2025/09/apple-backports-fix-for-cve-2025-43300.html
https://support.apple.com/en-us/125115