CVE-2026-43772 Overview
CVE-2026-43772 is a path traversal vulnerability in Apple macOS that allows a malicious application to escape its sandbox. Apple addressed the issue with improved input validation. The flaw affects multiple macOS versions and is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Successful exploitation requires local access and user interaction, but grants attackers the ability to read and modify files outside the intended sandbox boundary. The vulnerability is tracked under [CWE-22] (Improper Limitation of a Pathname to a Restricted Directory).
Critical Impact
An application can escape its sandbox, giving attackers access to files and resources that should be isolated from untrusted code.
Affected Products
- Apple macOS Sequoia (prior to 15.7.8)
- Apple macOS Sonoma (prior to 14.8.8)
- Apple macOS Tahoe (prior to 26.6)
Discovery Timeline
- 2026-07-27 - CVE-2026-43772 published to NVD
- 2026-07-28 - Last updated in NVD database
Technical Details for CVE-2026-43772
Vulnerability Analysis
The vulnerability stems from improper validation of file path inputs within a macOS component that enforces sandbox restrictions. A sandboxed application can craft pathnames containing traversal sequences to reference files outside its container. The sandbox is designed to restrict a process to a limited set of files and system resources. When path traversal succeeds, the sandbox boundary breaks down and the application gains access to resources it should not reach.
Exploitation requires the attacker to already have local code execution inside a sandboxed process. This scenario is common when a user opens a malicious document or runs an untrusted App Store application. The attack also requires user interaction, so exploitation typically pairs with social engineering or a malicious application download.
Root Cause
The root cause is improper limitation of a pathname to a restricted directory [CWE-22]. The affected code accepts path input without sufficiently canonicalizing or validating traversal sequences such as ../. Apple's fix adds stricter input validation to reject or normalize these paths before they reach privileged file operations.
Attack Vector
An attacker distributes a malicious application or convinces a user to run one. The sandboxed process invokes the vulnerable API with a crafted pathname. The system resolves that pathname to a location outside the sandbox container, allowing the process to read or write files it should not touch. From there, an attacker can stage further payloads, tamper with user data, or pivot to persistence.
No public proof-of-concept code has been released for CVE-2026-43772. See the Apple Support Document #128067 for vendor-supplied technical context.
Detection Methods for CVE-2026-43772
Indicators of Compromise
- Sandboxed processes writing to or reading from paths outside their designated container directory under ~/Library/Containers/.
- File system access events containing traversal sequences such as ../ originating from App Store or third-party sandboxed applications.
- Unexpected access to sensitive locations such as ~/Library/Application Support/, ~/Documents/, or system directories by processes with restricted entitlements.
Detection Strategies
- Monitor Endpoint Security framework events (ES_EVENT_TYPE_NOTIFY_OPEN, ES_EVENT_TYPE_NOTIFY_WRITE) for sandboxed processes accessing paths outside their container.
- Inspect sandboxd log entries in unified logging for deny or allow decisions involving traversal patterns.
- Correlate application code signature and entitlement data with file access telemetry to flag sandbox boundary violations.
Monitoring Recommendations
- Baseline normal file access patterns for sandboxed applications and alert on deviations that touch user home directories or system paths.
- Ingest macOS unified logs and Endpoint Security telemetry into a centralized platform for retrospective hunting.
- Track macOS build versions across the fleet to identify hosts still running vulnerable releases.
How to Mitigate CVE-2026-43772
Immediate Actions Required
- Update all Apple macOS systems to macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, or macOS Tahoe 26.6.
- Restrict installation of unsigned or untrusted applications through Gatekeeper and MDM policies.
- Audit installed sandboxed applications and remove those from unverified sources.
Patch Information
Apple has released fixes in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Refer to Apple Support Document #128067, Apple Support Document #128071, and Apple Support Document #128072 for the corresponding advisories. Apply updates through System Settings or your mobile device management platform.
Workarounds
- No vendor-supplied workaround exists. Patching is the only supported remediation.
- Reduce risk by enforcing least privilege, blocking installation of third-party applications outside the App Store, and enabling Gatekeeper enforcement.
- Educate users to avoid running applications from untrusted sources, since exploitation requires user interaction.
# Verify macOS build version and enforce Gatekeeper
sw_vers -productVersion
spctl --status
sudo spctl --master-enable
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
