{"id":"CVE-2026-112558","kind":"vulnerability","aliases":["CVE-2026-112558"],"related":[],"title":"Apple macOS: sandbox permissions flaw lets an app read sensitive user data","description":"A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.","summary":"A permissions issue in macOS allowed an app to reach sensitive user data it should not be able to access. Apple fixed it by adding sandbox restrictions in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","endpoints","infrastructure","macos"],"not_affected_if":["patched-macos"],"how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against `27.2`, `15.8.2` and `26.7.2`\n- Check Software Update in System Settings for pending macOS updates\n- unknown whether any other check is needed","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe), whichever matches the installed major release\n- unknown whether a configuration change is needed","status":"open","published_at":"2026-10-26T21:17:49+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","triaged_at":"2026-10-26T21:27:52+00:00","updated_at":"2026-10-26T21:27:52+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:27:52Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe), whichever matches the installed major release\n- unknown whether a configuration change is needed","reach":"local","title":"Apple macOS: sandbox permissions flaw lets an app read sensitive user data","impact":"medium","summary":"A permissions issue in macOS allowed an app to reach sensitive user data it should not be able to access. Apple fixed it by adding sandbox restrictions in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple","endpoints"],"confidence":0.5,"needs_auth":"unknown","worst_case":"a local app reads sensitive user data beyond its sandbox","analyst_note":"Check Apple's security release notes for CVE-2026-112558 for the affected component, required app access and whether exploitation is known.","how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against `27.2`, `15.8.2` and `26.7.2`\n- Check Software Update in System Settings for pending macOS updates\n- unknown whether any other check is needed","needs_analyst":true,"not_affected_if":["patched-macos"],"who_is_affected":"Any Mac running a macOS release earlier than the fixed versions named in the advisory is in scope, since the flaw sits in the operating system's sandboxing. The sources do not say which apps or configurations are needed to trigger it, so a fully patched machine is the only safe assumption to check against.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000633,"input_tokens":3281,"output_tokens":609,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112558':15A,18A '-2026':14A,17A '15.8.2':56B,80C '26.7.2':59B,83C '27.2':54B,77C 'abl':40B,88C 'access':42B,90C 'add':47B 'addit':66C 'address':64C 'allow':28B 'app':8A,30B,85C 'appl':1A,19B,43B 'cve':13A,16A 'data':12A,35B,93C 'endpoint':20B 'fix':44B,72C 'flaw':5A 'gate':53B,76C 'golden':52B,75C 'infrastructur':21B 'issu':25B,62C,70C 'let':6A 'maco':2A,22B,27B,51B,74C,78C,81C 'may':86C 'permiss':4A,24B,61C 'reach':32B 'read':9A 'restrict':49B,68C 'sandbox':3A,48B,67C 'sensit':10A,33B,91C 'sequoia':55B,79C 'taho':58B,82C 'user':11A,34B,92C","nicknames":[],"mitigations":[],"who_affected":"Any Mac running a macOS release earlier than the fixed versions named in the advisory is in scope, since the flaw sits in the operating system's sandboxing. The sources do not say which apps or configurations are needed to trigger it, so a fully patched machine is the only safe assumption to check against.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:49+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112558","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112558","severity":null,"published_at":"2026-10-26T21:17:49+00:00","modified_at":"2026-10-26T21:17:49+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","fetched_at":"2026-10-26T21:20:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}