CVE-2026-20685

An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://security.apple.com/documentation/private-cloud-compute/releasenotes#darwin-init	Release Notes

Configurations

Configuration 1 (hide)

cpe:2.3:a:apple:private_cloud_compute:*:*:*:*:*:*:*:*

History

26 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Un atacante en una posición de red privilegiada podría filtrar información sensible. Un problema de manejo de rutas se abordó con validación mejorada. Este problema está solucionado en la versión PCC 5E290.3.

Information

Published : 2026-05-18 16:16

Updated : 2026-10-26 13:10

NVD link : CVE-2026-20685

Mitre link : CVE-2026-20685

CVE.ORG link : CVE-2026-20685

JSON object : View

Products Affected

apple

private_cloud_compute

CWE

CWE-20

Improper Input Validation

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-20685", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20685", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-18T16:02:19.107495Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "product-security@apple.com", "affectedData": [{"vendor": "Apple", "product": "Private Cloud Compute Server Software", "versions": [{"status": "affected", "version": "0", "lessThan": "5E290.3", "versionType": "custom"}]}]}], "published": "2026-05-18T16:16:29.570", "references": [{"url": "https://security.apple.com/documentation/private-cloud-compute/releasenotes#darwin-init", "tags": ["Release Notes"], "source": "product-security@apple.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3."}, {"lang": "es", "value": "Un atacante en una posici\u00f3n de red privilegiada podr\u00eda filtrar informaci\u00f3n sensible. Un problema de manejo de rutas se abord\u00f3 con validaci\u00f3n mejorada. Este problema est\u00e1 solucionado en la versi\u00f3n PCC 5E290.3."}], "lastModified": "2026-10-26T13:10:00.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:private_cloud_compute:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0AA64A4F-A664-42DF-ACD0-DF9F8B630E30", "versionEndExcluding": "5e290.3"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}