Apple Releases 3 macOS Updates to Fix Screen Sharing Login Flaw

Q: Could a forgotten Screen Sharing setting on your Mac allow hackers to gain complete access without a password?

Yes — but only in specific circumstances, and Apple has now patched it. The flaw Apple fixed in macOS Tahoe 26.6.1, along with Sonoma 14.8.9 and Sequoia 15.7.9, could let an attacker on the same network authenticate to Screen Sharing without valid credentials. That means a Mac with Screen Sharing enabled could potentially be accessed even if the attacker did not know the password. This was not a universal “any Mac on the internet” problem. Screen Sharing is off by default on many Macs, so systems with the feature disabled were far less exposed. The risk was highest on Macs where Screen Sharing or Remote Management had been turned on and then forgotten, especially in setups using older VNC-style remote access options. In those cases, an intruder could potentially view the display and, depending on permissions, interact with apps, files, and system functions. Apple says the issue, tracked as CVE-2026-65400, was fixed through improved state management. The company has not said it was exploited in the wild, but the vulnerability was serious enough that Apple pushed the same fix across three supported macOS versions and recommended the updates for all users. Mac owners should check System Settings > General > Sharing and turn off Screen Sharing or Remote Management if they do not need them. If remote access is necessary, access should be limited to trusted users and not left broadly available. The most important step is to install the latest security update promptly.

3 articles · Updated · Engadget · Aug 6

macOS Tahoe 26.6.1 arrived just over a week after version 26.6, patching a bug that could let an attacker authenticate to Screen Sharing without valid credentials.
Apple said it fixed the vulnerability through improved state management, and Mac users can install the update through System Settings under Software Update.
Sonoma 14.8.9 and Sequoia 15.7.9 carry the same security fix, extending the patch to older supported macOS versions.