Protected user data access issue in macOS Tahoe Sandbox

A malicious local application may be able to bypass intended access restrictions and read protected user data. The available information indicates a confidentiality impact affecting user data protected by macOS permission and sandbox controls. No public information in the provided content indicates code execution, privilege escalation to root, or a sandbox escape beyond the unauthorized data access itself.

Until the patch is applied, reduce exposure by limiting installation and execution of untrusted or unnecessary applications, enforcing application allowlisting where possible, and restricting users' ability to run software from untrusted sources. Because exploitation requires a local app, standard controls such as least privilege, MDM-enforced software restrictions, and monitoring for anomalous app access to protected data may reduce risk, but the definitive mitigation is installing Apple's fix.

Upgrade affected systems to macOS Tahoe 26.5 or later, where Apple states the issue was fixed by adding additional restrictions in the relevant permissions enforcement path.