PT-2026-65157 · Apple · Apple Macos

CVE-2026-43749 · Published 2026-07-27 · Updated 2026-07-27

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-43749

Affected Products

Apple Macos

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-43749 · Security Note
• https://support.apple.com/en-us/128072 · Note
• https://support.apple.com/en-us/128067 · Note
• https://support.apple.com/en-us/128071 · Note