Executive brief
macOS uses snapshot handling to manage system data and user information. A permissions logic flaw allowed applications to access protected user data without proper authorization. This vulnerability could enable an app installed on a Mac to extract sensitive personal information.
Technical details
The vulnerability is a permissions bypass in macOS snapshot handling code. The root cause was insufficient authorization checks when accessing snapshot data, allowing unprivileged processes to read protected information. An attacker with the ability to run a local application could exploit this by requesting access to snapshots containing user data. The attack requires local code execution (an installed or running app) but does not require user interaction beyond normal app functionality. The issue was resolved in macOS Golden Gate 27 through improved permissions logic and authorization checks.
Affected products
- Apple macOS prior to Golden Gate 27
Timeline
- 2026-09-14: disclosed
- 2026-09-14: patched: Fixed in macOS Golden Gate 27