Live › vulnerability › CVE-2026-86907
Go to dashboardApple fixed an authorization flaw in macOS that lets an app holding admin privileges change the System Keychain. An attacker who already has admin rights on a Mac could alter stored system credentials and trust settings.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Macs running macOS Sequoia before 15.8 or macOS Tahoe before 26.7. The flaw needs an app that already runs with administrator privileges, so the risk is mainly to shared or managed Macs where admin rights are widely granted. Machines where only standard users run apps are less exposed.
No product ranges from the sources yet.
sw_vers -productVersion and compare against the fixed versions: 15.8 on macOS Sequoia, 26.7 on macOS Tahoe.15.8 (Sequoia) or 26.7 (Tahoe) or later via System Settings > General > Software Update.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain.
This page as .md · .json · in your agent: get_signal("CVE-2026-86907")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.