PT-2026-125422

CVE-2026-84633

Published

2026-09-14

Updated

2026-10-26

Description by

CVSS 3.1

9.0

Critical

MetricsAV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27

Description An issue involving path traversal occurs due to insufficient path validation. This flaw allows an application to break out of its sandbox, which is a security mechanism used to isolate running applications from the rest of the system.

Recommendations Update to macOS Golden Gate 27.

Exploitability

Fix

Impacts

Researchers

Niels Hofmans

Tristan Madani

Tristaninsec

Vendors

Affected products

Weakness enumeration

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')