{"id":"CVE-2026-113948","kind":"vulnerability","aliases":["CVE-2026-113948"],"related":[],"title":"macOS: a permissions gap let an app modify protected file system parts","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2. An app may be able to modify protected parts of the file system.","summary":"A permissions issue in macOS let an app change protected parts of the file system. Apple fixed it in macOS Golden Gate 27.2 by adding restrictions.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["endpoints","infrastructure","macos"],"not_affected_if":["macos-golden-gate-27.2-or-later"],"how_to_check":"- Check the installed version with `sw_vers -productVersion` and compare it with the fixed release.\n- unknown","fix":"- Update macOS to Golden Gate 27.2 or later.","status":"open","published_at":"2026-10-26T21:18:11+00:00","first_seen_at":"2026-10-26T21:20:31+00:00","triaged_at":"2026-10-26T21:21:37+00:00","updated_at":"2026-10-26T21:21:37+00:00","category":"infrastructure","confidence":0.45,"triage":{"at":"2026-10-26T21:21:37Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to Golden Gate 27.2 or later.","reach":"local","title":"macOS: a permissions gap let an app modify protected file system parts","impact":"medium","summary":"A permissions issue in macOS let an app change protected parts of the file system. Apple fixed it in macOS Golden Gate 27.2 by adding restrictions.","category":"infrastructure","nicknames":[],"who_cares":["macos","endpoints"],"confidence":0.45,"needs_auth":"unknown","worst_case":"A local app modifies protected system files on the machine.","analyst_note":"Confirm the affected macOS version range and the Apple security notes entry for this CVE; sources give no CVSS or exploit details.","how_to_check":"- Check the installed version with `sw_vers -productVersion` and compare it with the fixed release.\n- unknown","needs_analyst":true,"not_affected_if":["macos-golden-gate-27.2-or-later"],"who_is_affected":"Machines running macOS releases before Golden Gate 27.2 are affected. The sources do not say which configurations or app types make the flaw reachable, so unknown beyond that.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000543,"input_tokens":3246,"output_tokens":436,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-113948':15A,18A '-2026':14A,17A '27.2':44B,64C 'abl':69C 'add':46B 'addit':54C 'address':52C 'app':7A,29B,66C 'appl':37B 'chang':30B 'cve':13A,16A 'endpoint':19B 'file':10A,35B,76C 'fix':38B,59C 'gap':4A 'gate':43B,63C 'golden':42B,62C 'infrastructur':20B 'issu':24B,50C,57C 'let':5A,27B 'maco':1A,21B,26B,41B,61C 'may':67C 'modifi':8A,71C 'part':12A,32B,73C 'permiss':3A,23B,49C 'protect':9A,31B,72C 'restrict':47B,55C 'system':11A,36B,77C","nicknames":[],"mitigations":[],"who_affected":"Machines running macOS releases before Golden Gate 27.2 are affected. The sources do not say which configurations or app types make the flaw reachable, so unknown beyond that.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:11+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113948","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113948","severity":null,"published_at":"2026-10-26T21:18:11+00:00","modified_at":"2026-10-26T21:18:11+00:00","first_seen_at":"2026-10-26T21:20:31+00:00","fetched_at":"2026-10-26T21:20:31+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}