Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

macOS Tahoe: Sensitive User Data Access via Directory Path Parsing

CVE-2026-20632
Summary

A security issue in macOS Tahoe's directory path handling was fixed in version 26.4. This issue allowed an app to potentially access sensitive user data, which is a serious privacy concern. Update to macOS Tahoe 26.4 to resolve this issue.

Original title
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data.
Original description
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data.
Published: 25 Mar 2026 · Updated: 25 Mar 2026 · First seen: 25 Mar 2026