---
id: "CVE-2026-86932"
kind: "vulnerability"
aliases: ["CVE-2026-86932"]
title: "macOS: authorization flaw lets an app access sensitive user data"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["apple-devices", "infrastructure", "macos"]
not_affected_if: ["already-on-golden-gate-27"]
published_at: "2026-10-20T01:17:27+00:00"
first_seen_at: "2026-10-23T21:57:19+00:00"
updated_at: "2026-10-25T04:12:36+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86932", "first_seen_at": "2026-10-23T21:57:19+00:00"}]
---

# macOS: authorization flaw lets an app access sensitive user data

An authorization issue in macOS lets a local app reach sensitive user data it should not be able to read. The sources say the fix is in macOS Golden Gate 27 and give no further technical detail.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the macOS version under Apple menu > About This Mac or with `sw_vers -productVersion`
- unknown for anything beyond the version, the sources do not say which data or setting is involved

## Fix

- Update macOS to Golden Gate 27 or later via System Settings > General > Software Update
- unknown for any interim workaround, the sources do not say

## Timeline

- 2026-10-23T21:57:19+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-86932

## From the sources

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_