Logic Flaw in macOS Gatekeeper Allows Security Bypass

Publication date: 2025-12-17

Last updated on: 2025-12-18

Assigner: Apple Inc.

Description

A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.2. An app may bypass Gatekeeper checks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-17

Last Modified

2025-12-18

Generated

2026-07-06

AI Q&A

2025-12-17

EPSS Evaluated

2026-07-05

NVD

CVE-2025-46291

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	to 26.2 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-693	The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Attack-Flow Graph

Executive Summary

This vulnerability is a logic issue in macOS that allows an application to bypass Gatekeeper checks due to insufficient validation. It has been fixed in macOS Tahoe 26.2.

Impact Analysis

An attacker could exploit this vulnerability to run potentially untrusted or malicious applications on a macOS system by bypassing Gatekeeper's security checks, which may lead to unauthorized code execution or compromise of the system.

Mitigation Strategies

Update your macOS system to version Tahoe 26.2 or later, as this version contains the fix for the vulnerability that allows an app to bypass Gatekeeper checks.

Hi! I’m here to help you understand CVE-2025-46291. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70