{"id":"CVE-2026-112434","kind":"vulnerability","aliases":["CVE-2026-112434"],"related":[],"title":"Apple macOS: logic flaw lets a local app gain root privileges","description":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.","summary":"A logic flaw in macOS lets an app escalate to root privileges. The fix ships in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","endpoints","infrastructure","macos"],"not_affected_if":["fully-patched-macos"],"how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed versions\n- Check Software Update in System Settings for pending macOS updates","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe)","status":"open","published_at":"2026-10-26T21:17:33+00:00","first_seen_at":"2026-10-26T21:20:25+00:00","triaged_at":"2026-10-26T21:31:39+00:00","updated_at":"2026-10-26T21:31:39+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:31:39Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe)","reach":"local","title":"Apple macOS: logic flaw lets a local app gain root privileges","impact":"high","summary":"A logic flaw in macOS lets an app escalate to root privileges. The fix ships in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices","endpoints"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A local app gains root on the Mac.","analyst_note":"Confirm exploitation status and any prerequisites in Apple's security release notes for these macOS versions.","how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed versions\n- Check Software Update in System Settings for pending macOS updates","needs_analyst":true,"not_affected_if":["fully-patched-macos"],"who_is_affected":"Any Mac running the affected macOS releases is exposed, as the flaw is in the operating system itself. The sources do not say which local conditions are needed beyond an app running on the machine. Managed fleets should prioritise machines where users run untrusted software.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000576,"input_tokens":3266,"output_tokens":498,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112434':14A,17A '-2026':13A,16A '15.8.2':45B,68C '26.7.2':48B,71C '27.2':43B,65C 'abl':76C 'address':53C 'app':8A,31B,73C 'appl':1A,19B 'apple-devic':18B 'check':56C 'cve':12A,15A 'devic':20B 'endpoint':21B 'escal':32B 'fix':37B,60C 'flaw':4A,26B 'gain':9A,78C 'gate':42B,64C 'golden':41B,63C 'improv':55C 'infrastructur':22B 'issu':51C,58C 'let':5A,29B 'local':7A 'logic':3A,25B,50C 'maco':2A,23B,28B,40B,62C,66C,69C 'may':74C 'privileg':11A,35B,80C 'root':10A,34B,79C 'sequoia':44B,67C 'ship':38B 'taho':47B,70C","nicknames":[],"mitigations":[],"who_affected":"Any Mac running the affected macOS releases is exposed, as the flaw is in the operating system itself. The sources do not say which local conditions are needed beyond an app running on the machine. Managed fleets should prioritise machines where users run untrusted software.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:33+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112434","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112434","severity":null,"published_at":"2026-10-26T21:17:33+00:00","modified_at":"2026-10-26T21:17:33+00:00","first_seen_at":"2026-10-26T21:20:25+00:00","fetched_at":"2026-10-26T21:20:25+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}