{"id":"CVE-2026-86877","state":"PUBLISHED","title":"A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to delete files for which it does not h","description":"A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to delete files for which it does not have privileges.","publishedAt":"2026-10-26T20:41:54.637Z","updatedAt":"2026-10-26T20:41:54.637Z","severity":null,"assigner":"apple","products":["Apple macOS"],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"27","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/149035"],"weaknesses":[],"ingestedAt":"2026-10-29T20:13:26.108Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/86xxx/CVE-2026-86877.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-86877","state":"PUBLISHED","datePublished":"2026-10-26T20:41:54.637Z","dateUpdated":"2026-10-26T20:41:54.637Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2026-09-08T16:43:41.871Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to delete files for which it does not have privileges."}],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"27","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/149035"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"A malicious app may be able to delete files for which it does not have privileges"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-10-26T20:41:54.637Z"}}}}}