Live › vulnerability › CVE-2026-112487
Go to dashboardA path handling flaw in macOS lets a malicious app gain root privileges on the Mac. The sources say Apple fixed it with improved validation in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Any Mac running an affected macOS release before the fixed builds can be exposed, since the flaw is triggered by an app already running on the machine. The sources do not describe a configuration that makes a Mac safer, so treat every unpatched Mac as in scope. Managed fleets should prioritise machines where users run untrusted software.
No product ranges from the sources yet.
sw_vers -productVersion on each Mac, compared against the fixed versions 27.2, 15.8.2 and 26.7.2 (exact patch level unknown from sources)27.2 (Golden Gate), 15.8.2 (Sequoia), or 26.7.2 (Tahoe), whichever matches the installed major releaseEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-112487")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.