---
id: "CVE-2026-112473"
kind: "vulnerability"
aliases: ["CVE-2026-112473"]
title: "macOS Screen Sharing: legacy VNC password lets attackers copy files to the Mac"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "macos", "screen-sharing", "vnc"]
not_affected_if: ["no-vnc-password", "screen-sharing-off"]
published_at: "2026-10-26T21:17:37+00:00"
first_seen_at: "2026-10-26T21:20:26+00:00"
updated_at: "2026-10-26T21:30:10+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112473", "first_seen_at": "2026-10-26T21:20:26+00:00"}]
---

# macOS Screen Sharing: legacy VNC password lets attackers copy files to the Mac

Apple's macOS Screen Sharing has an authorization flaw in which an attacker holding the legacy VNC password can copy files onto the Mac. Apple fixed it in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `sw_vers` on each Mac and compare the ProductVersion with the fixed releases.
- Check whether Screen Sharing is enabled in System Settings > General > Sharing and whether VNC viewers may use a password.

## Fix

- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe).
- Turn off Screen Sharing or disable VNC legacy password access if it is not needed.

## Timeline

- 2026-10-26T21:20:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112473

## From the sources

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_