EIP-2026-104608

This exploit leverages a directory traversal vulnerability in OpenBase (bundled with Xcode) to create a root-owned file with rw-rw-rw permissions. It then abuses this to inject a malicious crontab entry, leading to a root shell via a compiled binary.