---
id: "CVE-2026-86939"
kind: "vulnerability"
aliases: ["CVE-2026-86939"]
title: "macOS: permissions flaw lets a root attacker reach protected user data"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["apple", "endpoints", "infrastructure", "macos"]
not_affected_if: ["already-patched-macos"]
published_at: "2026-10-26T21:20:31+00:00"
first_seen_at: "2026-10-26T21:55:22+00:00"
updated_at: "2026-10-26T21:56:53+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86939", "first_seen_at": "2026-10-26T21:55:22+00:00"}]
---

# macOS: permissions flaw lets a root attacker reach protected user data

Apple fixed a permissions issue in macOS that could let an attacker with root privileges access protected user data. The sources do not describe the exact component or the conditions beyond root access.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `sw_vers -productVersion` and compare against the fixed builds listed in the fix.
- unknown for any further check; the sources do not say what else to look at.

## Fix

- Update macOS Tahoe to `26.7.2` or later.
- Update macOS Golden Gate to `27.2` or later.

## Timeline

- 2026-10-26T21:55:22+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-86939

## From the sources

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An attacker with root privileges may be able to access protected user data.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_