Apple macOS Tahoe Directory Path Handling Vulnerability Allowing Access to Sensitive User Data

A vulnerability has been identified in the directory path handling within the Apple macOS Tahoe operating system. This issue, present in versions prior to macOS Tahoe 26.1, involves a parsing flaw that could allow an application to access sensitive user data. The vulnerability arises from inadequate path validation, which could be exploited to manipulate directory paths and access protected information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user data by applications.

Remediation

Users can upgrade to macOS Tahoe 26.1 to address this vulnerability.