{"id":"CVE-2026-86921","kind":"vulnerability","aliases":["CVE-2026-86921"],"related":[],"title":"Apple iOS and macOS: permissions flaw lets local attacker overwrite restricted files","description":"A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.","summary":"A permissions check in Apple's operating systems was fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27 and visionOS 27. A local attacker may be able to overwrite files they should not be able to change.","severity":"medium","cvss":6.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","ios","ipados","macos","visionos"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- Update iOS and iPadOS to `26.7` or later, or to `27` or later.\n- Update macOS Golden Gate to `27` or later, and visionOS to `27` or later.","status":"open","published_at":"2026-10-20T01:17:27+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-25T04:02:06+00:00","updated_at":"2026-10-25T04:02:06+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T04:02:06Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `26.7` or later, or to `27` or later.\n- Update macOS Golden Gate to `27` or later, and visionOS to `27` or later.","reach":"local","title":"Apple iOS and macOS: permissions flaw lets local attacker overwrite restricted files","impact":"medium","summary":"A permissions check in Apple's operating systems was fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27 and visionOS 27. A local attacker may be able to overwrite files they should not be able to change.","category":"infrastructure","nicknames":[],"who_cares":["ios","ipados","macos","visionos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"local attacker overwrites restricted system files on the device","analyst_note":"Check the Apple security notes for CVE-2026-86921 for the affected component, the exact fixed build numbers and whether any user action is needed.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Apple device owners and teams that manage Apple devices or fleets running the listed versions. The sources describe a local attacker, so the risk is to a device someone can already reach; unknown whether the sources limit it further.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000581,"input_tokens":3290,"output_tokens":504,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-86921':15A,18A '26.7':39B,41B,83C,86C '27':43B,45B,49B,52B,88C,91C,95C,97C 'abl':58B,66B,103C 'address':73C 'appl':1A,20B,31B 'apple-devic':19B 'attack':9A,55B,100C 'chang':68B 'check':29B 'cve':13A,16A 'devic':21B 'file':12A,61B,107C 'fix':36B,80C 'flaw':6A 'gate':48B,94C 'golden':47B,93C 'improv':75C 'infrastructur':22B 'io':2A,23B,38B,42B,82C,87C 'ipado':24B,40B,44B,85C,90C 'issu':71C,78C 'let':7A 'local':8A,54B,99C 'maco':4A,25B,46B,92C 'may':56B,101C 'oper':33B 'overwrit':10A,60B,105C 'permiss':5A,28B,70C 'restrict':11A,106C 'system':34B 'valid':76C 'visiono':26B,51B,96C","nicknames":[],"mitigations":[],"who_affected":"Apple device owners and teams that manage Apple devices or fleets running the listed versions. The sources describe a local attacker, so the risk is to a device someone can already reach; unknown whether the sources limit it further.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T01:17:27+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86921","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86921","severity":null,"published_at":"2026-10-20T01:17:27+00:00","modified_at":"2026-10-20T15:03:59+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}