{"id":"CVE-2026-86948","kind":"vulnerability","aliases":["CVE-2026-86948"],"related":[],"title":"Xcode: app can escape its sandbox through unvalidated library loading","description":"This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.","summary":"Apple's Xcode 27 fixes a flaw in which an app may be able to break out of its sandbox. Apple's fix enforces library validation on the affected binaries.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-developers","infrastructure","macos","xcode"],"not_affected_if":["unknown"],"how_to_check":"- `xcodebuild -version` to see the installed Xcode version\n- unknown","fix":"- Update Xcode to 27 or later\n- unknown","status":"open","published_at":"2026-10-20T01:17:28+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-25T05:06:10+00:00","updated_at":"2026-10-25T05:06:10+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-25T05:06:10Z","model":"claude-haiku-5-5","output":{"fix":"- Update Xcode to 27 or later\n- unknown","reach":"local","title":"Xcode: app can escape its sandbox through unvalidated library loading","impact":"high","summary":"Apple's Xcode 27 fixes a flaw in which an app may be able to break out of its sandbox. Apple's fix enforces library validation on the affected binaries.","category":"infrastructure","nicknames":[],"who_cares":["xcode","macos","apple-developers"],"confidence":0.4,"needs_auth":"unknown","worst_case":"sandboxed app escapes its sandbox to act on the system","analyst_note":"Find Apple's security notes for Xcode 27 to confirm affected versions, the exact binaries, and the trigger; NVD entry lacks detail.","how_to_check":"- `xcodebuild -version` to see the installed Xcode version\n- unknown","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Developers and teams who build or run software with Xcode on Apple platforms are likely affected, since the flaw is in Xcode itself. The sources do not say which Xcode versions are vulnerable or which binaries are involved, so exposure beyond older Xcode releases is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000557,"input_tokens":3247,"output_tokens":465,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-86948':13A,16A '27':26B,71C 'abl':36B,76C 'address':56C 'affect':51B,63C 'app':2A,33B,73C 'appl':18B,23B,43B 'apple-develop':17B 'binari':52B,64C 'break':38B,78C 'cve':11A,14A 'develop':19B 'enforc':46B,58C 'escap':4A 'fix':27B,45B,68C 'flaw':29B 'infrastructur':20B 'issu':54C,66C 'librari':9A,47B,59C 'load':10A 'maco':21B 'may':34B,74C 'sandbox':6A,42B,82C 'unvalid':8A 'valid':48B,60C 'xcode':1A,22B,25B,70C","nicknames":[],"mitigations":[],"who_affected":"Developers and teams who build or run software with Xcode on Apple platforms are likely affected, since the flaw is in Xcode itself. The sources do not say which Xcode versions are vulnerable or which binaries are involved, so exposure beyond older Xcode releases is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T01:17:28+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86948","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86948","severity":null,"published_at":"2026-10-20T01:17:28+00:00","modified_at":"2026-10-21T04:18:11+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}