EIP-2026-104607

This exploit leverages a vulnerability in OpenBase (bundled with Xcode) where the binary calls gnutar with elevated privileges. By manipulating the PATH environment variable and TAR_OPTIONS, it tricks the system into executing a malicious 'gzip' binary, leading to root privilege escalation.