---
id: "CVE-2026-112647"
kind: "vulnerability"
aliases: ["CVE-2026-112647"]
title: "Apple macOS: sandbox access flaw lets an app read sensitive user data"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["apple", "endpoints", "macos", "other"]
not_affected_if: []
published_at: "2026-10-26T21:17:58+00:00"
first_seen_at: "2026-10-26T21:20:29+00:00"
updated_at: "2026-10-26T21:23:57+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112647", "first_seen_at": "2026-10-26T21:20:29+00:00"}]
---

# Apple macOS: sandbox access flaw lets an app read sensitive user data

Apple fixed an access issue in macOS by adding sandbox restrictions. A malicious or compromised app may be able to read sensitive user data.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the macOS version with `sw_vers` and compare it to the fixed releases
- unknown for any further check; the sources do not say

## Fix

- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe)
- unknown for any other action; the sources do not say

## Timeline

- 2026-10-26T21:20:29+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112647

## From the sources

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_