CVE-2026-28889

MEDIUM

Apple Xcode <26.4 - Privilege Escalation

Title source: llm

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4. An app may be able to read arbitrary files as root.

References (1)

https://support.apple.com/en-us/126801

Scores

CVSS v3 6.2

EPSS 0.0002

EPSS Percentile 4.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-269

Status published

Products (2)

Apple/Xcode < 26.4

apple/xcode < 26.4

Published Mar 25, 2026

Tracked Since Mar 25, 2026