This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to delete protected user data.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

References
History

Fri, 12 Dec 2025 21:15:00 +0000

Type Values Removed Values Added
Description This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to delete protected user data.
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2025-12-12T20:56:42.316Z

Reserved: 2025-04-16T15:24:37.116Z

Link: CVE-2025-43381

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-12-12T21:15:53.517

Modified: 2025-12-12T21:15:53.517

Link: CVE-2025-43381

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.