Symlink Vulnerability in macOS by Apple
CVE-2025-43461

Currently unrated

Key Information:

Vendor: Apple
Status: Mac OS
Vendor: CVE Published:; 12 December 2025

What is CVE-2025-43461?

A vulnerability exists in macOS Tahoe that could allow unauthorized applications to access protected user data due to insufficient validation of symbolic links. This issue has been addressed in version 26.1 of macOS Tahoe, enhancing security measures to prevent potential exploitation.

Affected Version(s)

macOS < 26.1

References

https://support.apple.com/en-us/125634

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 12, 2025
Vulnerability Reserved
Apr 16, 2025

JSON