Live › vulnerability › CVE-2026-86877
Go to dashboardA path traversal flaw in macOS Golden Gate 27 lets a malicious app delete files it has no privileges to remove. The fix is improved path validation in the operating system.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Teams running macOS Golden Gate 27 on developer laptops or Macs used in build and CI pipelines are affected until they update. The sources do not say which earlier releases are impacted, and they do not describe a server-side or hosted component. Teams using only Linux or Windows machines can skip it.
No product ranges from the sources yet.
sw_vers -productVersion in Terminal.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to delete files for which it does not have privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-86877")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.