{"id":"CVE-2026-112570","kind":"vulnerability","aliases":["CVE-2026-112570"],"related":[],"title":"macOS: an app can escape its sandbox through an access issue","description":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.","summary":"Apple fixed an access issue in macOS that let an app break out of its sandbox. A malicious or compromised app could reach files and resources outside its restricted container.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["endpoints","infrastructure","macos"],"not_affected_if":["fixed-macos-version"],"how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed builds listed below.\n- Check System Settings > General > Software Update for pending macOS updates.","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe), or later.","status":"open","published_at":"2026-10-26T21:17:51+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","triaged_at":"2026-10-26T21:27:40+00:00","updated_at":"2026-10-26T21:27:40+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:27:40Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe), or later.","reach":"local","title":"macOS: an app can escape its sandbox through an access issue","impact":"medium","summary":"Apple fixed an access issue in macOS that let an app break out of its sandbox. A malicious or compromised app could reach files and resources outside its restricted container.","category":"infrastructure","nicknames":[],"who_cares":["macos","endpoints"],"confidence":0.5,"needs_auth":"unknown","worst_case":"sandboxed app escapes restrictions and reaches protected system resources","analyst_note":"Check Apple's security notes for CVE-2026-112570 to confirm the affected builds and the exploit prerequisites.","how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed builds listed below.\n- Check System Settings > General > Software Update for pending macOS updates.","needs_analyst":true,"not_affected_if":["fixed-macos-version"],"who_is_affected":"Any Mac running an affected macOS release is in scope, since the flaw sits in the operating system's sandbox. The sources do not say which configurations or app types are needed to trigger it, so unknown. Teams on fixed builds can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000577,"input_tokens":3278,"output_tokens":498,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112570':14A,17A '-2026':13A,16A '15.8.2':71C '26.7.2':74C '27.2':68C 'abl':79C 'access':10A,24B,52C 'addit':57C 'address':55C 'app':3A,31B,41B,76C 'appl':21B 'break':32B,81C 'compromis':40B 'contain':50B 'could':42B 'cve':12A,15A 'endpoint':18B 'escap':5A 'file':44B 'fix':22B,63C 'gate':67C 'golden':66C 'infrastructur':19B 'issu':11A,25B,53C,61C 'let':29B 'maco':1A,20B,27B,65C,69C,72C 'malici':38B 'may':77C 'outsid':47B 'reach':43B 'resourc':46B 'restrict':49B,59C 'sandbox':7A,36B,58C,85C 'sequoia':70C 'taho':73C","nicknames":[],"mitigations":[],"who_affected":"Any Mac running an affected macOS release is in scope, since the flaw sits in the operating system's sandbox. The sources do not say which configurations or app types are needed to trigger it, so unknown. Teams on fixed builds can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:51+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112570","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112570","severity":null,"published_at":"2026-10-26T21:17:51+00:00","modified_at":"2026-10-26T21:17:51+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","fetched_at":"2026-10-26T21:20:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}