Live › vulnerability › CVE-2026-86896
Go to dashboardA permissions issue in macOS lets a malicious app escalate its rights to root on the machine. Apple fixed it with additional restrictions in the listed macOS releases.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Any Mac running an earlier macOS build than the fixed versions is affected, as the flaw is in the operating system itself. Exposure requires a malicious app to be run on the machine, so managed fleets that restrict app installation face less risk, but they still need the update. The sources do not say which configurations or app permissions are required.
No product ranges from the sources yet.
sw_vers -productVersion on each Mac and compare the output with the fixed versions below.27.2 or later.15.8.2 or later.26.7.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to gain root privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-86896")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.