Apple Various Products Symlink Validation Vulnerability Allowing Access to Protected User Data

A vulnerability exists in multiple Apple products, including macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, iOS 26.1, iPadOS 26.1, tvOS 26.1, and visionOS 26.1. This vulnerability allows an app to access protected user data due to insufficient validation of symlinks. The issue could be exploited by apps that manipulate symlinked files to access data that is normally restricted.

Impact

Exploitation of this vulnerability could lead to unauthorized access to protected user data.

Remediation

Users can update to the latest versions of the affected operating systems to address this vulnerability.