---
id: CVE-2026-86907
title: An authorization issue was addressed with improved entitlement checks
summary: >-
  An authorization issue was addressed with improved entitlement checks. This
  issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin
  privileges may be able to modify the System Keychain.
severity: medium
cvss: 4.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N'
cvssSource: adp
vendor: Apple
product: macOS
affected:
  - macOS < 15.8
  - macOS < 26.7
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-20T14:52:34.585332Z'
published: '2026-10-20'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T20:35:05.277Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-86907'
references:
  - url: 'https://support.apple.com/en-us/149042'
  - url: 'https://support.apple.com/en-us/149043'
tags:
  - cve.org
epss: 0.00133
epssPercentile: 0.02792
ingestedAt: '2026-10-20T01:49:42.595Z'
---

## Overview

An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain.

## Affected

- `macOS < 15.8`
- `macOS < 26.7`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.