CVE-2025-43317

CVE-2025-43317 is a permissions issue present in multiple Apple operating systems, including macOS Tahoe, iOS/iPadOS, tvOS, visionOS, and watchOS. The root cause is insufficient validation of symlinks, which could allow an app to bypass privacy preferences and access sensitive user data [1]. The vulnerability was addressed by adding additional restrictions in the respective OS updates.

To exploit this vulnerability, an attacker would need to have an app installed on the target device. No special authentication or network position is required beyond the app's existing entitlements. The app could leverage the inadequate symlink validation to gain unauthorized access to sensitive data stored on the device.

Successful exploitation could lead to the disclosure of sensitive user data, such as location information, contacts, or other protected data. The impact varies by platform, but the common outcome is that an app can access data it should not be able to.

Apple released patches for this vulnerability on September 15, 2025, in macOS Tahoe 26, iOS 26, iPadOS 26, tvOS 26, visionOS 26, and watchOS 26 [1][4]. Users are strongly encouraged to update their devices to the latest OS versions to mitigate the risk.