CVE-2026-28823
A path handling issue was addressed with improved validation.
Published Mar 25, 2026 · updated Jun 17, 2026 · apple macos
A path handling issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.4. An app with root privileges may be able to delete protected system files.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 25, 2026 · NIST NVD
Detected
A path handling issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.4. An app with root privileges may be able to delete protected system files.
Jun 17, 2026 · NIST NVD
Updated
A path handling issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.4. An app with root privileges may be able to delete protected system files.
Affected
- cpe apple/macosversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-28823
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-28823
A path handling issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.4. An app with root privileges may be able to delete protected system files.
nvd.nist.gov