CVE-2026-86907: Apple macOS Sequoia vulnerability
An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in macOS Sequoia 15.8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in macOS Tahoe 26.7
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker needs an app that already has administrator privileges. The issue may allow that app to modify the System Keychain.
Which macOS releases contain the fix?
Apple fixed the issue in macOS Sequoia 15.8 and macOS Tahoe 26.7.
What should be prioritized if immediate patching is not possible?
Prioritize restricting and reviewing applications with administrator privileges, since exploitation requires an admin-privileged app. Monitor such applications for unexpected System Keychain modifications.