What is GHSA-r5vw-6gpf-p649?

GHSA-r5vw-6gpf-p649 is a security advisory published by GitHub Security Advisories with Medium severity. A race condition was addressed with improved handling of symbolic links. This issue is fixed in...

Which CVE IDs does GHSA-r5vw-6gpf-p649 cover?

GHSA-r5vw-6gpf-p649 covers the following CVE IDs: CVE-2026-112421. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r5vw-6gpf-p649?

GHSA-r5vw-6gpf-p649 has a CVSS v3 base score of 4.7, published by GitHub Security Advisories.

GHSA-r5vw-6gpf-p649MediumCVSS 4.7

A race condition was addressed with improved handling of symbolic links. This issue is fixed in...

Vendor

GitHub Security Advisories

Published

October 26, 2026

Last Modified

November 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-112421 →

📋 Description

A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-112421
https://support.apple.com/en-us/149521
https://support.apple.com/en-us/149522
https://support.apple.com/en-us/149523
https://github.com/advisories/GHSA-r5vw-6gpf-p649