Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

macOS Screen Sharing may let attacker create root symlinks

CVE-2026-112511 · published 9 days ago
Summary

The Screen Sharing feature in macOS versions Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 could let a malicious remote user create symbolic links that run with full system privileges. This could be used to place or modify files as the root user, potentially compromising the system. Update macOS to the listed versions or later to apply the fix.

What to do
  • Update apple macos to version 15.8.2 or later.
Affected software
VendorProductAffected versions
apple macos < 15.8.2
Original advisory text
A path handling issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious Screen Sharing peer may be able to crea...
A path handling issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious Screen Sharing peer may be able to create arbitrary symlinks as root.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
6.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-59Link Following
Timeline
Published26 Oct 2026
Updated4 Nov 2026
First seen26 Oct 2026
Sources
CVE-2026-112511 · NVD
CVE-2026-112511 · MITRE
Track software like this
Free during beta