---
id: "CVE-2026-112617"
kind: "vulnerability"
aliases: ["CVE-2026-112617"]
title: "macOS: an app can read sensitive user data, fixed in 27.2"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["apple-devices", "endpoints", "infrastructure", "macos"]
not_affected_if: []
published_at: "2026-10-26T21:17:54+00:00"
first_seen_at: "2026-10-26T21:20:28+00:00"
updated_at: "2026-10-26T21:25:23+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112617", "first_seen_at": "2026-10-26T21:20:28+00:00"}]
---

# macOS: an app can read sensitive user data, fixed in 27.2

Apple's macOS Golden Gate 27.2 fixes an information disclosure flaw that lets an app access sensitive user data. The sources give no product component, trigger, or CVSS score.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `sw_vers -productVersion` on each Mac and compare against the fixed release
- unknown

## Fix

- Update macOS to `27.2` or later (Golden Gate)
- unknown

## Timeline

- 2026-10-26T21:20:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112617

## From the sources

An information disclosure issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_