Inclusion of Sensitive Information in Log Files in macOS - CVE-2026-113898
Published: October 27, 2026
Vulnerability identifier: #VU157760
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-113898
CWE-ID: CWE-532
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to potentially disclose sensitive information.
The vulnerability exists due to insertion of sensitive information into log files in the Accounts component of macOS when writing log entries. A local user can read sensitive data from these logs, if accessible, to obtain information that may otherwise be restricted.
Affected software
macOS
Apple iOS
iPadOS
Apple iOS
iPadOS
How to mitigate CVE-2026-113898
Install update from vendor's website.
macOS - addressed in versions 27.2 26B123, 15.8.2 24H232, 26.7.2 25G332
Apple iOS - addressed in versions 26.7.2, 27.2 24B119, 27.2 24B120, 27.2 24B91020
iPadOS - addressed in versions 26.7.2, 27.2 24B119
Apple iOS - addressed in versions 26.7.2, 27.2 24B119, 27.2 24B120, 27.2 24B91020
iPadOS - addressed in versions 26.7.2, 27.2 24B119