{"id":"CVE-2026-112467","kind":"vulnerability","aliases":["CVE-2026-112467"],"related":[],"title":"Apple macOS: app can bypass network restrictions after improved checks","description":"This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to bypass network restrictions.","summary":"An app on macOS can get around network restrictions that should limit what it may connect to. Apple fixed it with improved checks in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","infrastructure","mac-fleet","macos"],"not_affected_if":["patched-macos"],"how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed versions\n- unknown","fix":"- Update macOS to `27.2` (Golden Gate) or `26.7.2` (Tahoe) or later\n- unknown","status":"open","published_at":"2026-10-26T21:17:36+00:00","first_seen_at":"2026-10-26T21:20:26+00:00","triaged_at":"2026-10-26T21:30:14+00:00","updated_at":"2026-10-26T21:30:14+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:30:14Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate) or `26.7.2` (Tahoe) or later\n- unknown","reach":"local","title":"Apple macOS: app can bypass network restrictions after improved checks","impact":"low","summary":"An app on macOS can get around network restrictions that should limit what it may connect to. Apple fixed it with improved checks in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple","mac-fleet"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A local app escapes network limits it was meant to observe.","analyst_note":"Sources give only Apple's one-line notice; check Apple's security release notes for which restriction is bypassed and the CVSS score.","how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed versions\n- unknown","needs_analyst":true,"not_affected_if":["patched-macos"],"who_is_affected":"Any Mac running an unpatched macOS build can be affected, since the flaw is in the operating system and not in a specific app. The sources do not say which network restriction is bypassed or whether a managed or enterprise configuration changes exposure. unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000567,"input_tokens":3249,"output_tokens":485,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112467':13A,16A '-2026':12A,15A '26.7.2':54B,73C '27.2':50B,70C 'abl':78C 'address':58C 'app':3A,24B,75C 'appl':1A,17B,40B 'around':29B 'bypass':5A,80C 'check':10A,45B,61C 'connect':38B 'cve':11A,14A 'fix':41B,65C 'fleet':21B 'gate':49B,69C 'get':28B 'golden':48B,68C 'improv':9A,44B,60C 'infrastructur':18B 'issu':56C,63C 'limit':34B 'mac':20B 'mac-fleet':19B 'maco':2A,22B,26B,47B,52B,67C,71C 'may':37B,76C 'network':6A,30B,81C 'restrict':7A,31B,82C 'taho':53B,72C","nicknames":[],"mitigations":[],"who_affected":"Any Mac running an unpatched macOS build can be affected, since the flaw is in the operating system and not in a specific app. The sources do not say which network restriction is bypassed or whether a managed or enterprise configuration changes exposure. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:36+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112467","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112467","severity":null,"published_at":"2026-10-26T21:17:36+00:00","modified_at":"2026-10-26T21:17:36+00:00","first_seen_at":"2026-10-26T21:20:26+00:00","fetched_at":"2026-10-26T21:20:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}