CVE-2026-20633
Symlink Handling Flaw in macOS Allows Unauthorized Data Access
Publication date: 2026-03-25
Last updated on: 2026-03-25
Assigner: Apple Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| apple | macos | From 14.0 (inc) to 14.8.5 (exc) |
| apple | macos | From 15.0 (inc) to 15.7.5 (exc) |
| apple | macos | From 26.0 (inc) to 26.4 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-59 | The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-20633 is a vulnerability in macOS that involves improper handling of symbolic links (symlinks) and directory path parsing. This flaw exists in components such as Archive Utility in macOS Sonoma 14.8.5 and DesktopServices in macOS Sequoia 15.7.5. Due to this issue, an application may be able to bypass normal access controls and access user-sensitive data.
The vulnerability was addressed by improving the handling and validation of symlinks and directory paths to prevent unauthorized data access.
How can this vulnerability impact me? :
This vulnerability can impact you by allowing an application on your macOS device to access sensitive user data without proper authorization. This unauthorized access could lead to exposure of personal or confidential information stored on your system.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, you should update your macOS system to the fixed versions where the issue is resolved.
- Upgrade to macOS Sequoia 15.7.5
- Upgrade to macOS Sonoma 14.8.5
- Upgrade to macOS Tahoe 26.4
These updates include improved handling of symbolic links and path validation to prevent unauthorized access to user-sensitive data.