---
id: "CVE-2026-113947"
kind: "vulnerability"
aliases: ["CVE-2026-113947"]
title: "macOS: crafted archive unpacking can crash apps or run code"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["desktop", "infrastructure", "macos"]
not_affected_if: ["already-patched"]
published_at: "2026-10-26T21:18:11+00:00"
first_seen_at: "2026-10-26T21:20:31+00:00"
updated_at: "2026-10-26T21:21:04+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113947", "first_seen_at": "2026-10-26T21:20:31+00:00"}]
---

# macOS: crafted archive unpacking can crash apps or run code

Unpacking a maliciously crafted archive on macOS can terminate an app unexpectedly or, per the advisory, allow arbitrary code execution. The sources say the fix is an access restriction change in macOS Golden Gate 27.2.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- Update macOS to Golden Gate 27.2 or later (version string as given by the source: `27.2`).

## Timeline

- 2026-10-26T21:20:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113947

## From the sources

This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a maliciously crafted archive may lead to unexpected app termination or arbitrary code execution.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_