CVE-2026-112511

**CVE-2026-112511** is a path handling vulnerability affecting Apple's macOS Screen Sharing Server. Discovered by security researcher Nathaniel Oh (@calysteon), the flaw stems from improper path handling logic within the Screen Sharing component. If exploited, a malicious Screen Sharing peer can leverage this issue to create arbitrary symbolic links (symlinks) with root privileges on the target system. Apple addressed this vulnerability by implementing improved path handling logic in its security updates released in October 2026. The fix is included in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. Users are advised to update their systems to these versions or later to mitigate the risk of exploitation.