Live › vulnerability › CVE-2026-112605
Apple's Xcode has a symlink handling flaw that lets an app read arbitrary files on the machine. The fix is in Xcode 27.2.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 01:27 UTC. All times on this page are UTC.
Teams that build apps on Macs with Xcode are the ones exposed; the sources do not describe the exact trigger or which Xcode versions before 27.2 are affected. Machines without Xcode installed are not affected.
No product ranges from the sources yet.
xcodebuild -version27.2Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.
This page as .md · .json · in your agent: get_signal("CVE-2026-112605")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.