PT-2026-125227

CVE-2026-112541

Published

2026-10-26

Updated

2026-10-26

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27.2 macOS Sequoia versions prior to 15.8.2 macOS Tahoe versions prior to 26.7.2

Description A parsing issue exists in the handling of directory paths due to insufficient path validation. This flaw could allow an application to gain root privileges, which are the highest level of administrative access on the system.

Recommendations Update macOS Golden Gate to version 27.2. Update macOS Sequoia to version 15.8.2. Update macOS Tahoe to version 26.7.2.

Exploitability

Fix

Impacts

Researchers

Andreas Jaegersberger

Ro Achterberg

Vendors

Affected products

Weakness enumeration

CWE-693: Protection Mechanism Failure

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')