CVE-2025-46291CWE-693

CVE-2025-46291

High · published December 18, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

⚠️ A sneaky logic issue lets some apps slip past Gatekeeper checks! Just like a guest sneaking in through a back door at a party, these apps can bypass essential security precautions. 🔒 Think of Gatekeeper as your party bouncer, carefully checking IDs at the door. If there's a flaw in the process, it’s like allowing someone in without verifying who they are — you never know what trouble might follow! This vulnerability could allow unauthorized applications to run on your macOS system, leading to potential data leaks or malicious activity. While it’s not a catastrophic breach, it can still open the door to some unwelcome guests who might exploit this gap for nefarious purposes.

Put simply

Think of Gatekeeper as your party bouncer, carefully checking IDs at the door. If there's a flaw in the process, it’s like allowing someone in without verifying who they are — you never know what trouble might follow! The flaw arises from inadequate validation within the application framework, allowing certain apps to bypass the Gatekeeper checks designed to enforce app security on macOS.

What to do

This vulnerability could allow unauthorized applications to run on your macOS system, leading to potential data leaks or malicious activity. While it’s not a catastrophic breach, it can still open the door to some unwelcome guests who might exploit this gap for nefarious purposes. To protect your system, ensure you update to macOS Tahoe 26.2 immediately. Regularly review app permissions and be cautious about which applications you install. 🎯 You've got this! By staying vigilant and updating your system, you can keep your macOS environment secure. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.3th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2025-12-18T02:16Z
Affected products (1)
ProductVersionsFixed in
apple/macos< 26.226.2
References (2)
EPSS history
Timeline
  • 17 DEC 20:47Z
    A logic issue was addressed with improved validation
    cvelistv5