CVE-2025-43369

Access to Protected User Data via Symlink Handling Bug

View on CVE.org
Published Sep 15, 2025 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data.

Analysis

AI-generated

Technical impact

The vulnerability arises from inadequate handling of symbolic links in macOS, which can allow an application to reach files or directories it should not normally access. This flaw constitutes a weak access control mechanism (CWE-284) and can lead to confidentiality violations by enabling an attacker to read protected user data. The issue is reported to be mitigated with updated symlink processing logic.

Affected Systems

Apple macOS systems prior to macOS Tahoe 26 are affected, as the fix is included only in macOS Tahoe 26 and later releases. Any installation of earlier macOS versions that has not been updated to this release may still expose users to the flaw.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity, focusing on confidentiality impact, while the EPSS score of less than 1% implies a low probability of active exploitation. The vulnerability is not listed in the CISA KEV catalog. Attackers would likely need to deliver or run a malicious application that leverages the symlink handling bug to access protected files, but no immediate remote exploitation vector is documented.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the macOS Tahoe 26 update or any later release that includes the symlink handling fix
  • Configure Gatekeeper or other app‑installation controls to limit the installation of third‑party applications that could exploit the symlink flaw
  • Ensure that third‑party applications run in a sandboxed environment with the least privilege necessary to minimize file access

Generated by OpenCVE AI on April 28, 2026 at 18:40 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-29277 This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data.
History
Type Values Removed Values Added
Title Access to Protected User Data via Symlink Handling Bug
Type Values Removed Values Added
References
Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Weaknesses CWE-284
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}
Type Values Removed Values Added
Description This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data.
References
Earlier changes (2)
Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Apr 2, 2026, 6:25 PM
Reserved
Apr 16, 2025, 3:24 PM

View source JSON

Updated
Sep 16, 2025, 1:44 PM

JSON

Status
Modified
Published
Sep 15, 2025, 11:15 PM
Modified
Jun 17, 2026, 9:23 AM

View source JSON

No data.

Updated
Apr 28, 2026, 6:45 PM

JSON