Product:
Xcode
Summary
A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4. An app may be able to read arbitrary files as root.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-28889 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the system. By leveraging the permissions issue, the attacker could potentially read sensitive files with root privileges, which could lead to unauthorized access to confidential information.
Affected Products
- Xcode: The development environment that may allow apps to read arbitrary files as root due to a permissions issue.
Mitigation
To mitigate this vulnerability, users should update to Xcode 26.4 or later, which addresses the permissions issue with additional restrictions. Regularly updating software can help protect against similar vulnerabilities.