---
id: "CVE-2026-112677"
kind: "vulnerability"
aliases: ["CVE-2026-112677"]
title: "macOS: authorization flaw lets an app run code with system privileges"
severity: "high"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["endpoints", "infrastructure", "mac-fleets", "macos"]
not_affected_if: ["patched-macos"]
published_at: "2026-10-26T21:18:01+00:00"
first_seen_at: "2026-10-26T21:20:30+00:00"
updated_at: "2026-10-26T21:23:37+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112677", "first_seen_at": "2026-10-26T21:20:30+00:00"}]
---

# macOS: authorization flaw lets an app run code with system privileges

An authorization check in macOS was missing, so a local application can run arbitrary code with system privileges. Apple fixed it with improved access control in the listed macOS releases.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `sw_vers -productVersion` on each Mac and compare against the fixed versions.
- Check the macOS build in System Settings > General > About.

## Fix

- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe) or later.

## Timeline

- 2026-10-26T21:20:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112677

## From the sources

An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An application may be able to execute arbitrary code with system privileges.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_