CVE-2026-65381 is an entitlement validation flaw in macOS that could let a malicious app break out of its sandbox. NVD scores it 10.0. Apple fixed it in macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7. Update managed Macs to one of those releases or later.
What's affected
- Product: Apple macOS, in the AppleMobileFileIntegrity component.
- Fixed in: macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7, per Apple's security content pages.
- Impact stated by Apple: a malicious app may be able to break out of its sandbox.
- Cause stated by Apple: a validation issue in the entitlement verification, addressed with improved validation of the process entitlement.
- Weakness: CWE-862 missing authorization.
- Score: CVSS 10.0 with a network vector in the NVD record. Apple's own wording describes a malicious app that is already on the Mac, so read the score with that in mind.
How to check if you're exposed
Check the macOS version on a Mac:
sw_vers
Compare the ProductVersion value with the fixed releases for your branch: Tahoe 26.7, Sequoia 15.8, or Golden Gate 27. A Mac on an older point release of the same branch is still affected.
For a fleet, pull the OS version from your device management tool and filter for machines below the fixed release in each branch. Also check which Macs are on a branch that has no fix listed. Apple's pages cover the three releases above, so check Apple's notes for any other branch you still run.
What to do now
- Inventory Macs by macOS version and branch.
- Install macOS Tahoe 26.7, Sequoia 15.8 or Golden Gate 27 (or later) through your normal update process.
- Where users can install their own software, review which apps are allowed until the update lands.
- Confirm the new version with sw_vers on a sample of machines.
- Read the full Apple security content page for your branch, since each release fixes other issues too.
Why it matters
The App Sandbox limits what an app can reach. Entitlements are the rights an app declares, and the system has to verify them. Apple says the verification of the process entitlement was too loose, so an app could end up with more freedom than it should have. The weakness class is missing authorization.
A sandbox escape is rarely the first step of an attack. It is the step that turns a contained app into one that can reach the rest of the system. That is why it matters on shared Macs and on machines where users install third party software. The CISA KEV flag in the record is false and Apple's page does not report exploitation.
Quick check
Why is the score 10.0 if a malicious app is needed?
The score comes from the NVD vector, which lists a network attack vector and no user interaction. Apple's description speaks of a malicious app. Use Apple's text to judge your exposure and the score to rank the work.
Is this exploited in the wild?
Neither the record's KEV flag nor Apple's security content page says so.
Sources
- About the security content of macOS Golden Gate 27
- About the security content of macOS Tahoe 26.7
- About the security content of macOS Sequoia 15.8
- Gold record for CVE-2026-65381
Last reviewed: 19 October 2026.
