Executive brief
macOS autofs is a system component that automatically mounts network-based file systems (such as NFS shares) from directory servers. An attacker who controls a network directory server can exploit a path traversal vulnerability to execute arbitrary code with root-level privileges on affected macOS systems, giving them complete control over compromised machines.
Technical details
The vulnerability is a path traversal issue in the autofs component that fails to properly validate paths provided by network directory servers. An attacker controlling a network directory server (e.g., LDAP, NIS) can craft malicious path entries that bypass validation and lead to arbitrary code execution with root privileges. The attack requires the victim's macOS system to be configured to mount file systems from an attacker-controlled directory server, and is reachable over the network. Apple addressed this by implementing improved path validation in autofs. The vulnerability is tracked as CVE-2026-84568 and has been patched in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
- Apple macOS Golden Gate before 27
- Apple macOS Sequoia before 15.8
- Apple macOS Tahoe before 26.7
Timeline
- 2026-09-14: patched: Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7
- 2026-09-14: disclosed