What is GHSA-h5rr-v89q-r95x?

GHSA-h5rr-v89q-r95x is a security advisory published by GitHub Security Advisories with Medium severity. An authorization issue was addressed with improved entitlement checks. This issue is fixed in...

Which CVE IDs does GHSA-h5rr-v89q-r95x cover?

GHSA-h5rr-v89q-r95x covers the following CVE IDs: CVE-2026-86907. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h5rr-v89q-r95x?

GHSA-h5rr-v89q-r95x has a CVSS v3 base score of 4.4, published by GitHub Security Advisories.

GHSA-h5rr-v89q-r95xMediumCVSS 4.4

An authorization issue was addressed with improved entitlement checks. This issue is fixed in...

Vendor

GitHub Security Advisories

Published

October 20, 2026

Last Modified

October 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-86907 →

📋 Description

An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-86907
https://support.apple.com/en-us/149042
https://support.apple.com/en-us/149043
https://github.com/advisories/GHSA-h5rr-v89q-r95x