CVE-2026-86928: Apple macOS Golden Gate vulnerability

Q: Which macOS release includes the fix?

The issue is fixed in macOS Golden Gate 27.

Q: What access or configuration prerequisites are documented for exploitation?

The available information does not specify attacker prerequisites, affected default configurations, or a way to determine whether protected user data has already been accessed.

Published Oct 20, 2026

Updated

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.

Affected Software

1 affected component

Apple macOS Golden Gate<27

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade macOS Golden Gate to a version that resolves this vulnerability.
Fixed in 27

Event History

Oct 20, 2026

CVE Published

via MITRE·12:50 AM

Data Sourced

via MITRE·12:50 AM

DescriptionWeakness

Data Sourced

via NVD·01:17 AM

Description

Frequently Asked Questions

Which macOS release includes the fix?

The issue is fixed in macOS Golden Gate 27.

What access or configuration prerequisites are documented for exploitation?

The available information does not specify attacker prerequisites, affected default configurations, or a way to determine whether protected user data has already been accessed.