Live › vulnerability › CVE-2026-86939
Go to dashboardApple fixed a permissions issue in macOS that could let an attacker with root privileges access protected user data. The sources do not describe the exact component or the conditions beyond root access.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Mac machines running macOS Tahoe before 26.7.2 or macOS Golden Gate before 27.2 are affected. The sources do not describe further conditions, so unknown whether managed or unmanaged fleets differ.
No product ranges from the sources yet.
sw_vers -productVersion and compare against the fixed builds listed in the fix.26.7.2 or later.27.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An attacker with root privileges may be able to access protected user data.
This page as .md · .json · in your agent: get_signal("CVE-2026-86939")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.