{"id":"CVE-2026-112542","kind":"vulnerability","aliases":["CVE-2026-112542"],"related":[],"title":"macOS: permissions flaw lets a malicious app intercept network traffic","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to intercept network traffic.","summary":"A permissions issue in macOS allowed a malicious app to intercept network traffic. Apple fixed it by adding restrictions in the listed macOS builds.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":["fixed-os-version"],"how_to_check":"- Check the installed macOS version under Apple menu > About This Mac, or run `sw_vers -productVersion`\n- Compare it with the fixed builds: `27.2` (Golden Gate), `15.8.2` (Sequoia), `26.7.2` (Tahoe)","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe), or later, via System Settings > General > Software Update","status":"open","published_at":"2026-10-26T21:17:47+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","triaged_at":"2026-10-26T21:28:09+00:00","updated_at":"2026-10-26T21:28:09+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-26T21:28:09Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe), or later, via System Settings > General > Software Update","reach":"local","title":"macOS: permissions flaw lets a malicious app intercept network traffic","impact":"medium","summary":"A permissions issue in macOS allowed a malicious app to intercept network traffic. Apple fixed it by adding restrictions in the listed macOS builds.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.6,"needs_auth":"unknown","worst_case":"malicious app reads or redirects network traffic on the Mac","analyst_note":"Check Apple's security notes for the CVE-2026-112542 entry to confirm the attack requirements and whether user interaction is needed.","how_to_check":"- Check the installed macOS version under Apple menu > About This Mac, or run `sw_vers -productVersion`\n- Compare it with the fixed builds: `27.2` (Golden Gate), `15.8.2` (Sequoia), `26.7.2` (Tahoe)","needs_analyst":true,"not_affected_if":["fixed-os-version"],"who_is_affected":"Macs running macOS versions earlier than the fixed builds. The sources do not say which apps or network configurations are needed to trigger it, so the exposure beyond the OS version is unknown. Systems already on the fixed builds are not affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000605,"input_tokens":3276,"output_tokens":554,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112542':13A,16A '-2026':12A,15A '15.8.2':65C '26.7.2':68C '27.2':62C 'abl':74C 'add':39B 'addit':52C 'address':50C 'allow':27B 'app':7A,30B,71C 'appl':18B,35B 'apple-devic':17B 'build':45B 'cve':11A,14A 'devic':19B 'fix':36B,57C 'flaw':3A 'gate':61C 'golden':60C 'infrastructur':20B 'intercept':8A,32B,76C 'issu':24B,48C,55C 'let':4A 'list':43B 'maco':1A,21B,26B,44B,59C,63C,66C 'malici':6A,29B,70C 'may':72C 'network':9A,33B,77C 'permiss':2A,23B,47C 'restrict':40B,53C 'sequoia':64C 'taho':67C 'traffic':10A,34B,78C","nicknames":[],"mitigations":[],"who_affected":"Macs running macOS versions earlier than the fixed builds. The sources do not say which apps or network configurations are needed to trigger it, so the exposure beyond the OS version is unknown. Systems already on the fixed builds are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:47+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112542","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112542","severity":null,"published_at":"2026-10-26T21:17:47+00:00","modified_at":"2026-10-26T21:17:47+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","fetched_at":"2026-10-26T21:20:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}