CVE-2026-28854: Security vulnerability
Published Oct 20, 2026
·Updated
The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in macOS Golden Gate 27
Frequently Asked Questions
1
What is required to exploit this issue?
An attacker would need to maliciously modify an app bundle and have the modified app launched.
2
How can I remediate the issue?
Update to macOS Golden Gate 27, which includes additional app bundle integrity checks to address the issue.