EIP-2026-103375

This writeup details a vulnerability in macOS's `update_dyld_shared_cache` tool, where insufficient SIP checks allow potential injection of malicious libraries into the dyld shared cache. The analysis highlights flaws in `rootless_check_trusted()` and discusses theoretical exploitation via `-root` or `-overlay` flags.