6.2
Medium
CVE-2026-28889 A permissions issue was addressed with additional restrictions
Description
A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4. An app may be able to read arbitrary files as root.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Xcode 26.4 | earliest → < 26.4 | 26.4 |
References
- support.apple.com support.apple.com
Timeline
- Published
- Last modified
Other CVEs of Xcode
The 50 CVEs of Xcode →
CVE-2026-112605
This issue was addressed with improved handling of symlinks
3.3
Low
CVE-2026-112602
An authorization issue was addressed with improved state management
3.3
Low
CVE-2026-86948
This issue was addressed by enforcing library validation on the affected binaries
7.8
High
CVE-2026-86949
This issue was addressed by enforcing library validation on the affected binaries
8.8
High