---
id: CVE-2026-112523
title: This issue was addressed with improved handling of symlinks
summary: >-
  This issue was addressed with improved handling of symlinks. This issue is
  fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An
  app may be able to access user-sensitive data.
severity: none
vendor: Apple
product: macOS
affected:
  - macOS < 15.8.2
  - macOS < 26.7.2
  - macOS < 27.2
published: '2026-10-26'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T20:41:33.332Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-112523'
references:
  - url: 'https://support.apple.com/en-us/149521'
  - url: 'https://support.apple.com/en-us/149522'
  - url: 'https://support.apple.com/en-us/149523'
tags:
  - cve.org
epss: 0.00218
epssPercentile: 0.12248
ingestedAt: '2026-10-27T16:11:59.016Z'
---

## Overview

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access user-sensitive data.

## Affected

- `macOS < 15.8.2`
- `macOS < 26.7.2`
- `macOS < 27.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
