CVE-2026-20694 - Vulnerability Details - OpenCVE

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00024.

Key SSVC decision points have not yet been added.

Vendors	Products
Apple	Ios And Ipados Macos

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products
Apple	Ios And Ipados Macos

References

Link	Providers
https://support.apple.com/en-us/126346
https://support.apple.com/en-us/126348
https://support.apple.com/en-us/126349
https://support.apple.com/en-us/126350
https://support.apple.com/en-us/126794
https://support.apple.com/en-us/126795
https://support.apple.com/en-us/126796

History

Wed, 25 Mar 2026 22:00:00 +0000

Type	Values Removed	Values Added
Title		Symlink Exploit Enables Apps to Access Sensitive User Data
Weaknesses		CWE-200 CWE-22

Wed, 25 Mar 2026 12:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Apple Apple ios And Ipados Apple macos
Vendors & Products		Apple Apple ios And Ipados Apple macos

Wed, 25 Mar 2026 01:00:00 +0000

Type	Values Removed	Values Added
Description		This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data.
References		https://support.apple.com/en-us/126346 https://support.apple.com/en-us/126348 https://support.apple.com/en-us/126349 https://support.apple.com/en-us/126350 https://support.apple.com/en-us/126794 https://support.apple.com/en-us/126795 https://support.apple.com/en-us/126796

MITRE

Status: PUBLISHED

Assigner: apple

Published: 2026-03-25T00:32:02.873Z

Updated: 2026-03-25T00:32:02.873Z

Reserved: 2025-11-11T14:43:07.876Z

Link: CVE-2026-20694

Vulnrichment

No data.

NVD

Status : Awaiting Analysis

Published: 2026-03-25T01:17:06.217

Modified: 2026-03-25T15:41:58.280

Link: CVE-2026-20694

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-03-25T20:56:27Z

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,26.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "iOS and iPadOS", "source": "cna", "vendor": "Apple"}, "product": "ios_and_ipados", "vendor": "apple"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,14.8.4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,14.8.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,15.7.4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,15.7.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,26.3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,26.4)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "macOS", "source": "cna", "vendor": "Apple"}, "product": "macos", "vendor": "apple"}], "analysis": {"en": {"generated_at": "2026-03-25T02:26:49.690356+00:00", "value": {"mitigation_remediation": ["Upgrade to the latest version of iOS (26.3), iPadOS (26.3), macOS Sequoia (15.7.4 or newer), macOS Sonoma (14.8.4 or newer), or macOS Tahoe (26.3 or newer).", "Verify that no older or third\u2011party applications remain installed that could contain the vulnerability.", "Restart the device after updating to ensure updated binaries are in use."], "summary": {"action": "Immediate Patch", "impact": "Information Disclosure"}, "threat_synthesis": {"affected_systems": "The vulnerability affects Apple\u2019s operating systems: iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4 and 15.7.5, macOS Sonoma 14.8.4 and 14.8.5, and macOS Tahoe 26.3 and 26.4. Devices running any of these versions are susceptible until they receive the patched update.", "description_and_impact": "This issue arises from insufficient validation of symbolic links when handling file paths. An attacker can craft a malicious asset that misdirects the operating system into reading or writing files outside the intended sandbox. The result is that an application or app developer can obtain access to data that should be protected, potentially exposing personal information or system configuration files. The weakness corresponds to improper access control and path traversal.", "risk_and_exploitability": "The flaw can be leveraged by any application that processes user\u2011supplied files, making the attack vector primarily local or app\u2011level. Detailed EPSS or KEV data are not available, but the capacity to read sensitive information presents a significant confidentiality risk. A malicious app or an attacker with device access could exploit the flaw by installing or modifying software that triggers the improper symlink handling, potentially leading to data leakage. The risk diminishes once users upgrade to the patched OS releases."}}}}, "created": "2026-03-25T11:36:43.849446+00:00", "title": "Symlink Exploit Enables Apps to Access Sensitive User Data", "updated": "2026-03-25T20:56:27.002877+00:00", "vendors": ["apple", "apple$PRODUCT$ios_and_ipados", "apple$PRODUCT$macos"], "weaknesses": ["CWE-22", "CWE-200"]}