{"id":"CVE-2026-112569","kind":"vulnerability","aliases":["CVE-2026-112569"],"related":[],"title":"Apple macOS: sandbox escape fixed with extra restrictions in three releases","description":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.","summary":"An access issue in macOS allowed an app to break out of its sandbox, which is the restricted environment that limits what the app can touch. Apple fixed it by adding sandbox restrictions in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","macos","other"],"not_affected_if":["already-patched"],"how_to_check":"- unknown","fix":"- Update macOS to Golden Gate 27.2, Sequoia 15.8.2 or Tahoe 26.7.2, or later.","status":"open","published_at":"2026-10-26T21:17:50+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","triaged_at":"2026-10-26T21:27:42+00:00","updated_at":"2026-10-26T21:27:42+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-26T21:27:42Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to Golden Gate 27.2, Sequoia 15.8.2 or Tahoe 26.7.2, or later.","reach":"local","title":"Apple macOS: sandbox escape fixed with extra restrictions in three releases","impact":"high","summary":"An access issue in macOS allowed an app to break out of its sandbox, which is the restricted environment that limits what the app can touch. Apple fixed it by adding sandbox restrictions in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","category":"other","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A sandboxed app escapes its limits and reaches system resources.","analyst_note":"Check Apple's security release notes for CVE-2026-112569 for the affected component, exploit prerequisites and any detection steps.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["already-patched"],"who_is_affected":"Any Mac running a macOS release older than the fixed versions named above. The sources do not say which apps or configurations are needed to trigger it, so unknown beyond that. Machines already on the fixed releases are not affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000569,"input_tokens":3278,"output_tokens":483,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112569':14A,17A '-2026':13A,16A '15.8.2':61B,85C '26.7.2':64B,88C '27.2':59B,82C 'abl':93C 'access':23B,66C 'add':52B 'addit':71C 'address':69C 'allow':27B 'app':29B,45B,90C 'appl':1A,19B,48B 'apple-devic':18B 'break':31B,95C 'cve':12A,15A 'devic':20B 'environ':40B 'escap':4A 'extra':7A 'fix':5A,49B,77C 'gate':58B,81C 'golden':57B,80C 'issu':24B,67C,75C 'limit':42B 'maco':2A,21B,26B,56B,79C,83C,86C 'may':91C 'releas':11A 'restrict':8A,39B,54B,73C 'sandbox':3A,35B,53B,72C,99C 'sequoia':60B,84C 'taho':63B,87C 'three':10A 'touch':47B","nicknames":[],"mitigations":[],"who_affected":"Any Mac running a macOS release older than the fixed versions named above. The sources do not say which apps or configurations are needed to trigger it, so unknown beyond that. Machines already on the fixed releases are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:50+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112569","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112569","severity":null,"published_at":"2026-10-26T21:17:50+00:00","modified_at":"2026-10-26T21:17:50+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","fetched_at":"2026-10-26T21:20:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}