Drag & drop from Finder rejected (system beep) on macOS 27 until quarantine attribute is removed

[58jzj7x25b-create]

Title: Drag & drop from Finder rejected (system beep) on macOS 27 until quarantine attribute is removed

Describe the bug
Dragging files from Finder into a Cyberduck browser window does nothing except play the system alert sound ("bonk"). No error dialog, no transfer starts. The problem appeared on the release version of macOS 27 (Golden Gate) and persists on 27.2 beta.

Environment

• Cyberduck 9.6.0 (downloaded from cyberduck.io)
• MacBook Pro M1 Pro
• macOS 27 (Golden Gate), first seen on the release build, still present on 27.2 beta
• Connection is active, target folder is writable

Steps to reproduce

1. Launch Cyberduck normally (Finder / Dock) and connect to any server.
2. Drag one or more files from Finder into the browser window.
3. Result: system beep, nothing happens.

Expected behavior
The upload starts, as in previous macOS versions.

What I tried

• Re-adding Cyberduck in Full Disk Access (it was not listed there at all)
• Resetting TCC permissions and preferences
• Cyberduck does not appear under Automation either

Observations

• Launching the binary from Terminal (/Applications/Cyberduck.app/Contents/MacOS/Cyberduck) made drag & drop work intermittently.
• Removing the quarantine attribute fixed the issue:

  xattr -dr com.apple.quarantine /Applications/Cyberduck.app
  

  After that, drag & drop works normally when launched from Finder.

Additional context
This suggests macOS 27 handles drop operations differently for apps carrying com.apple.quarantine, silently rejecting the drop. Happy to provide logs (Console / log stream) or test builds if needed.

[matthewberryman]

This bug affects me too. It also extends to the File > Upload menu item too, preventing me from uploading files whatsoever with Cyberduck. The xattr -dr com.apple.quarantine /Applications/Cyberduck.app workaround does not work for me.

[matthewberryman]

@58jzj7x25b-create : are you able to upload at all?

[dkocher]

Try if checking System Settings → Privacy & Security → Files & Folders → Downloads|Desktop Folder resolves the problem. However Full Disk Access is not required.

[matthewberryman]

Cyberduck does not request permissions.
I cannot drag and drop the Cyberduck app from Finder to that window in the System Settings app, nor is there a plus button to add the Cyberduck app to the list of apps that can access various Files & Folders:

I am unable to upload from other locations inside of my home directory but outside of Desktop or Documents or Downloads folders, using the either the File > Upload menu item or the drag and drop method.

Edit to add the log file:
cyberduck.log

[matthewberryman]

Looking through the log file, I see it reached the dialogue prompt about the cleanup of old transfers, but this was not shown.
The likely cause is that Cyberduck attaches the prompt to a Transfers window that hasn’t been shown yet.
The likely fix is to show the Transfers window before attaching the cleanup prompt, or attach it to the visible browser window. This is a different issue than the one @58jzj7x25b-create reported, hence the workaround of xattr -dr com.apple.quarantine /Applications/Cyberduck.app did not work for me.

I tested the app in VMs running macOS 27.0.1 and macOS 27.2 beta 3 and could reproduce the issue in beta 3, suggesting it's a way in which the window is being shown, or a race condition, in beta 3.

[matthewberryman]

I updated the Cyberduck app from 9.5.4 to 9.6.0 and can reproduce my issue on macOS 27.2 beta 3.