A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
History

Tue, 27 Oct 2026 05:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Tue, 27 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
Title Path Parsing Vulnerability Allowing Privilege Escalation on macOS
Weaknesses CWE-20

Mon, 26 Oct 2026 21:00:00 +0000

Type Values Removed Values Added
Description A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2026-10-26T20:36:50.345Z

Updated: 2026-10-26T20:36:50.345Z

Reserved: 2026-10-19T17:05:22.978Z

Link: CVE-2026-112541

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-26T21:17:46.883

Modified: 2026-10-26T21:17:46.883

Link: CVE-2026-112541

cve-icon Redhat

No data.