CVEvulnerability

CVE-2026-20685

6.5 MEDIUM Published 2026-05-18 Modified 2026-10-26 Official page ↗

Status: Analyzed
Published: 2026-05-18
Last modified: 2026-10-26
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-20, CWE-22

Description

An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3.

Affected configurations

• apple private cloud compute (< 5e290.3)

Weakness · CWE (2)

CWE-20 Improper Input Validation weakness
CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References

https://security.apple.com/documentation/private-cloud-compute/releasenotes#darwin-init Release Notes

CVE-2026-20685

Description

Affected configurations

Related

Weakness · CWE (2)

References