CVE-2025-46313 describes a logging-related vulnerability in Apple macOS where insufficient data redaction could allow an app to access sensitive user data. Apple fixed this issue in macOS Tahoe 26.1 by improving data redaction mechanisms. The vulnerability has a CVSS 3.1 base score of 5.5, indicating medium severity, with the attack vector being local (AV:L), low attack complexity (AC:L), no privileges required (PR:N), user interaction required (UI:R), unchanged scope (S:U), and high confidentiality impact (C:H). Integrity and availability impacts are none. No official remediation level or patch link is provided in the data, but the fix is stated to be included in macOS Tahoe 26.1.

An attacker with local access and the ability to trick a user into interacting with an app could exploit this vulnerability to gain access to sensitive user data through insufficiently redacted logs. The confidentiality of user data is impacted, but integrity and availability are not affected. There are no known exploits in the wild currently.

The issue is fixed in macOS Tahoe 26.1 with improved data redaction. Users and administrators should upgrade to macOS Tahoe 26.1 or later to remediate this vulnerability. Patch status beyond this fix is not explicitly confirmed; therefore, verify with Apple’s official advisory for the latest remediation guidance.