---
id: CVE-2025-43465
title: >-
  A parsing issue in the handling of directory paths was addressed with improved
  path validation
summary: >-
  A parsing issue in the handling of directory paths was addressed with improved
  path validation. This issue is fixed in macOS Tahoe 26.1. An app may be able
  to access sensitive user data.
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-22
  - CWE-22
vendor: apple
product: macos
affected:
  - macos < 26.1
patched:
  - macos 26.1
published: '2025-12-12'
updated: '2026-10-07'
sourceUpdated: '2026-10-07T20:10:01.970'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-43465'
references:
  - url: 'https://support.apple.com/en-us/125634'
    label: product-security@apple.com
tags:
  - nvd
epss: 0.00194
epssPercentile: 0.08249
ingestedAt: '2026-10-07T20:46:46.915Z'
---

## Overview

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.

## Affected

- `macos < 26.1`

## Remediation

Upgrade past the affected range:

- `macos 26.1`