Executive brief
macOS includes system components that parse and validate directory paths used by applications and system services. A flaw in this validation could allow an app to access sensitive user data by traversing outside intended directory boundaries. The issue affects multiple macOS versions and is fixed in the latest releases.
Technical details
This vulnerability is a path traversal / directory path parsing issue in macOS kernel or system frameworks. The root cause is insufficient validation of directory paths, potentially allowing applications to bypass filesystem access controls through crafted path inputs. The attack requires local access and execution of a malicious application. An attacker can exploit this to read files and access sensitive user data outside the application's intended sandbox or intended file access scope. The issue is patched in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 through improved path validation logic.
Affected products
- Apple macOS Golden Gate before 27
- Apple macOS Sequoia before 15.8
- Apple macOS Tahoe before 26.7
Timeline
- 2026-09-14: disclosed
- 2026-09-14: patched: Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7