Description
An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution.
Published: 2026-10-26
Score: 8.1 High
EPSS: n/a
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
https://support.apple.com/en-us/149521 cve-icon cve-icon
History

Tue, 27 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
Title Authentication Bypass Allowing Remote Code Execution in macOS Golden Gate
First Time appeared Apple
Apple macos
Weaknesses CWE-285
CWE-287
Vendors & Products Apple
Apple macos
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 26 Oct 2026 21:00:00 +0000

Type Values Removed Values Added
Description An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution.
References

Subscriptions

Apple Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-10-27T03:56:19.089Z

Reserved: 2026-10-19T17:05:21.833Z

Link: CVE-2026-112427

cve-icon Vulnrichment

Updated: 2026-10-26T21:50:47.785Z

cve-icon NVD

Status : Received

Published: 2026-10-26T21:17:32.437

Modified: 2026-10-27T04:17:44.950

Link: CVE-2026-112427

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-26T23:15:08Z

Weaknesses