{"id":"CVE-2026-112675","kind":"vulnerability","aliases":["CVE-2026-112675"],"related":[],"title":"Apple macOS: missing entitlement checks let an app read sensitive user data","description":"This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.","summary":"Apple fixed a flaw in macOS where an app could access sensitive user data it should not reach. The sources say the fix adds additional entitlement checks in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","endpoints","infrastructure","macos"],"not_affected_if":["already-on-fixed-macos"],"how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against the fixed builds (Tahoe 26.7.2, Sequoia 15.8.2, Golden Gate 27.2)\n- unknown for any other check, the sources do not say","fix":"- Update macOS to `26.7.2` (Tahoe), `15.8.2` (Sequoia) or `27.2` (Golden Gate) via System Settings > General > Software Update\n- unknown for any further action, the sources do not say","status":"open","published_at":"2026-10-26T21:18:01+00:00","first_seen_at":"2026-10-26T21:20:29+00:00","triaged_at":"2026-10-26T21:23:40+00:00","updated_at":"2026-10-26T21:23:40+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:23:40Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `26.7.2` (Tahoe), `15.8.2` (Sequoia) or `27.2` (Golden Gate) via System Settings > General > Software Update\n- unknown for any further action, the sources do not say","reach":"local","title":"Apple macOS: missing entitlement checks let an app read sensitive user data","impact":"medium","summary":"Apple fixed a flaw in macOS where an app could access sensitive user data it should not reach. The sources say the fix adds additional entitlement checks in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple","endpoints"],"confidence":0.5,"needs_auth":"unknown","worst_case":"An app reads sensitive user data it should not access","analyst_note":"Check Apple's security notes for the affected macOS builds and whether the flaw needs a malicious app installed and what data it exposes; the sources give no detail beyond the one-line description.","how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against the fixed builds (Tahoe 26.7.2, Sequoia 15.8.2, Golden Gate 27.2)\n- unknown for any other check, the sources do not say","needs_analyst":true,"not_affected_if":["already-on-fixed-macos"],"who_is_affected":"The sources say the flaw lets an app reach sensitive user data, but they do not say which apps or configurations are needed to trigger it. Any team running Macs on the affected macOS branches should update; the sources do not say whether managed or fleet-only Macs are treated differently.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000637,"input_tokens":3271,"output_tokens":620,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112675':15A,18A '-2026':14A,17A '15.8.2':56B,79C '26.7.2':59B,82C '27.2':54B,76C 'abl':87C 'access':33B,89C 'add':46B 'addit':47B,65C 'address':63C 'app':8A,31B,84C 'appl':1A,19B,23B 'check':5A,49B,67C 'could':32B 'cve':13A,16A 'data':12A,36B,92C 'endpoint':20B 'entitl':4A,48B,66C 'fix':24B,45B,71C 'flaw':26B 'gate':53B,75C 'golden':52B,74C 'infrastructur':21B 'issu':61C,69C 'let':6A 'maco':2A,22B,28B,51B,73C,77C,80C 'may':85C 'miss':3A 'reach':40B 'read':9A 'say':43B 'sensit':10A,34B,90C 'sequoia':55B,78C 'sourc':42B 'taho':58B,81C 'user':11A,35B,91C","nicknames":[],"mitigations":[],"who_affected":"The sources say the flaw lets an app reach sensitive user data, but they do not say which apps or configurations are needed to trigger it. Any team running Macs on the affected macOS branches should update; the sources do not say whether managed or fleet-only Macs are treated differently.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:01+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112675","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112675","severity":null,"published_at":"2026-10-26T21:18:01+00:00","modified_at":"2026-10-26T21:18:01+00:00","first_seen_at":"2026-10-26T21:20:29+00:00","fetched_at":"2026-10-26T21:20:29+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}