CVE-2026-28910

Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.4

Description A flaw in the macOS Archive Utility allows a malicious application to access arbitrary files due to insufficient permissions checking. The issue can be exploited if a user executes an attacker-controlled shell script and is tricked into performing a drag-and-drop action. This process allows an attacker to swap a signed application's executable on disk, bypassing code signing protections that typically guard applications downloaded from the App Store or directly from the web.

Recommendations Update macOS Tahoe to version 26.4.