---
id: "CVE-2026-84542"
kind: "vulnerability"
aliases: ["CVE-2026-84542"]
title: "macOS: an app can read files outside its sandbox"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["endpoints", "infrastructure", "macos"]
not_affected_if: ["patched-macos"]
published_at: "2026-10-26T21:20:06+00:00"
first_seen_at: "2026-10-26T21:55:21+00:00"
updated_at: "2026-10-26T21:57:15+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84542", "first_seen_at": "2026-10-26T21:55:21+00:00"}]
---

# macOS: an app can read files outside its sandbox

Apple macOS has an access control flaw that lets an app read files outside its sandbox. An attacker who gets a malicious or compromised app running on the Mac can read user files the app should not reach.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the macOS version with `sw_vers`, then compare it to the fixed builds named in the sources.
- unknown

## Fix

- Update macOS to `27` (macOS Golden Gate), `15.8.2` (macOS Sequoia), or `26.7.2` (macOS Tahoe), or later.

## Timeline

- 2026-10-26T21:55:21+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-84542

## From the sources

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to read files outside of its sandbox.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_