{"id":"CVE-2026-112497","kind":"vulnerability","aliases":["CVE-2026-112497"],"related":[],"title":"Apple macOS: improved permissions check lets an app escape its sandbox","description":"This issue was addressed with improved permissions checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.","summary":"Apple fixed a permissions-checking flaw in several macOS releases that let an app break out of its sandbox. The sources do not say which component is involved or what an escaped app can then reach.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","endpoints","infrastructure","macos"],"not_affected_if":["already-patched"],"how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against the fixed builds.\n- unknown for any other check; the sources do not name a file or setting.","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe) or later, via System Settings > General > Software Update.","status":"open","published_at":"2026-10-26T21:17:40+00:00","first_seen_at":"2026-10-26T21:20:26+00:00","triaged_at":"2026-10-26T21:29:48+00:00","updated_at":"2026-10-26T21:29:48+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:29:48Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe) or later, via System Settings > General > Software Update.","reach":"local","title":"Apple macOS: improved permissions check lets an app escape its sandbox","impact":"medium","summary":"Apple fixed a permissions-checking flaw in several macOS releases that let an app break out of its sandbox. The sources do not say which component is involved or what an escaped app can then reach.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple","endpoints"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A sandboxed app gains access beyond its sandbox on the Mac","analyst_note":"Check Apple's security notes for the CVE-2026-112497 entry to confirm the affected component and whether the sandbox escape is exploited.","how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against the fixed builds.\n- unknown for any other check; the sources do not name a file or setting.","needs_analyst":true,"not_affected_if":["already-patched"],"who_is_affected":"Any Mac running an macOS release older than the fixed builds is potentially exposed. The sources do not say whether managed or unmanaged devices, or specific app types, are more exposed. Devices already on the fixed releases can skip this.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000591,"input_tokens":3270,"output_tokens":527,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112497':14A,17A '-2026':13A,16A '15.8.2':78C '26.7.2':81C '27.2':75C 'abl':86C 'address':62C 'app':8A,36B,55B,83C 'appl':1A,18B,22B 'break':37B,88C 'check':5A,27B,66C 'compon':48B 'cve':12A,15A 'endpoint':19B 'escap':9A,54B 'fix':23B,70C 'flaw':28B 'gate':74C 'golden':73C 'improv':3A,64C 'infrastructur':20B 'involv':50B 'issu':60C,68C 'let':6A,34B 'maco':2A,21B,31B,72C,76C,79C 'may':84C 'permiss':4A,26B,65C 'permissions-check':25B 'reach':58B 'releas':32B 'sandbox':11A,41B,92C 'say':46B 'sequoia':77C 'sever':30B 'sourc':43B 'taho':80C","nicknames":[],"mitigations":[],"who_affected":"Any Mac running an macOS release older than the fixed builds is potentially exposed. The sources do not say whether managed or unmanaged devices, or specific app types, are more exposed. Devices already on the fixed releases can skip this.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:40+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112497","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112497","severity":null,"published_at":"2026-10-26T21:17:40+00:00","modified_at":"2026-10-26T21:17:40+00:00","first_seen_at":"2026-10-26T21:20:26+00:00","fetched_at":"2026-10-26T21:20:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}