Live › vulnerability › CVE-2026-112511
Go to dashboardA path handling flaw in macOS Screen Sharing lets a malicious connected peer create arbitrary symbolic links as root. An attacker can use this to redirect privileged file writes and reach files outside the intended location.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Macs with Screen Sharing enabled that accept connections from other hosts are exposed, since the flaw needs a malicious peer on that session. Machines where Screen Sharing is off, or that are not reachable by untrusted peers, are much less exposed. unknown for exact affected build ranges beyond the fixed versions named in the description.
No product ranges from the sources yet.
sw_vers -productVersion and compare it against the fixed builds listed below.27.2 (Golden Gate), 15.8.2 (Sequoia), or 26.7.2 (Tahoe) or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A path handling issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious Screen Sharing peer may be able to create arbitrary symlinks as root.
This page as .md · .json · in your agent: get_signal("CVE-2026-112511")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.