A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.
History

Tue, 27 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
Title Filesystem Path Traversal Enabling Arbitrary File Read/Write on iOS/iPadOS
First Time appeared Apple
Apple ios And Ipados
Weaknesses CWE-22
CWE-284
Vendors & Products Apple
Apple ios And Ipados

Mon, 26 Oct 2026 21:00:00 +0000

Type Values Removed Values Added
Description A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2026-10-26T20:37:28.196Z

Updated: 2026-10-26T20:37:28.196Z

Reserved: 2026-10-19T17:05:24.036Z

Link: CVE-2026-112612

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-26T21:17:53.890

Modified: 2026-10-27T14:53:24.677

Link: CVE-2026-112612

cve-icon Redhat

No data.