{"id":"CVE-2026-86935","kind":"vulnerability","aliases":["CVE-2026-86935"],"related":[],"title":"macOS: extra app entitlements let an app read user-sensitive data","description":"This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data.","summary":"Apple removed some extra entitlements that an app could hold on macOS. A malicious or compromised app could use them to access user-sensitive data it should not reach.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":["fixed-os-version"],"how_to_check":"- Check the macOS version with `sw_vers -productVersion`\n- unknown","fix":"- Update macOS to Golden Gate 27 or later via System Settings > General > Software Update\n- unknown","status":"open","published_at":"2026-10-20T01:17:27+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-25T05:06:10+00:00","updated_at":"2026-10-25T05:06:10+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T05:06:10Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to Golden Gate 27 or later via System Settings > General > Software Update\n- unknown","reach":"local","title":"macOS: extra app entitlements let an app read user-sensitive data","impact":"medium","summary":"Apple removed some extra entitlements that an app could hold on macOS. A malicious or compromised app could use them to access user-sensitive data it should not reach.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"An app reads user-sensitive data it should not access","analyst_note":"Find Apple's security notes for Golden Gate 27 to confirm affected builds and the exact entitlement involved.","how_to_check":"- Check the macOS version with `sw_vers -productVersion`\n- unknown","needs_analyst":true,"not_affected_if":["fixed-os-version"],"who_is_affected":"Mac users and fleets running macOS releases before Golden Gate 27 are exposed, since the entitlement removal ships only in that release. The sources do not say which earlier builds are affected or which apps can trigger it. unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000545,"input_tokens":3240,"output_tokens":443,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-86935':15A,18A '27':70C 'abl':75C 'access':45B,77C 'addit':60C 'address':57C 'app':3A,7A,31B,40B,72C 'appl':20B,24B 'apple-devic':19B 'compromis':39B 'could':32B,41B 'cve':13A,16A 'data':12A,49B,81C 'devic':21B 'entitl':4A,28B,61C 'extra':2A,27B 'fix':65C 'gate':69C 'golden':68C 'hold':33B 'infrastructur':22B 'issu':55C,63C 'let':5A 'maco':1A,23B,35B,67C 'malici':37B 'may':73C 'reach':53B 'read':8A 'remov':25B,59C 'sensit':11A,48B,80C 'use':42B 'user':10A,47B,79C 'user-sensit':9A,46B,78C","nicknames":[],"mitigations":[],"who_affected":"Mac users and fleets running macOS releases before Golden Gate 27 are exposed, since the entitlement removal ships only in that release. The sources do not say which earlier builds are affected or which apps can trigger it. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T01:17:27+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86935","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86935","severity":null,"published_at":"2026-10-20T01:17:27+00:00","modified_at":"2026-10-20T15:03:59+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}