CVE-2026-86877: Path Traversal

Published Oct 26, 2026

Updated

A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to delete files for which it does not have privileges.

Event History

Oct 26, 2026

CVE Published

via MITRE·08:41 PM

Data Sourced

via MITRE·08:41 PM

DescriptionWeakness

Frequently Asked Questions

Who is exposed to this issue?

Systems running a version of macOS prior to macOS Golden Gate 27 may be exposed, because the issue is fixed in that release.

What does an attacker need to exploit it?

An attacker would need to run a malicious application on the affected Mac. The available information does not describe a remote exploitation path.

What is the potential impact?

A malicious app may be able to delete files that it does not have privileges to delete.

CVE-2026-86877: Path Traversal

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact?