{"id":"CVE-2026-86949","kind":"vulnerability","aliases":["CVE-2026-86949"],"related":[],"title":"Xcode: malicious app can break out of its sandbox","description":"This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox.","summary":"A malicious app can break out of its macOS sandbox because some binaries shipped with Xcode did not enforce library validation. Apple fixed it in Xcode 27 (released Sept 14, 2026; advisory entry added Oct 19). Apple lists the affected platform as macOS Tahoe 26.6 and later. No exploitation reported.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Xcode","fixed":["27"],"affected":"< 27","ecosystem":"vendor"}],"ecosystems":[],"tags":["apple-developers","infrastructure","macos","sandbox-escape","xcode"],"not_affected_if":["xcode-27-or-later","xcode-not-installed"],"how_to_check":"Open Xcode, then choose Xcode > About Xcode, or run 'xcodebuild -version' in a terminal. Any version below 27 is affected. Apple does not name the affected binaries, so there is no file-level check.","fix":"Update Xcode to 27 or later, from the Mac App Store or developer.apple.com.","status":"open","published_at":"2026-10-20T01:17:28+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-23T22:32:54+00:00","updated_at":"2026-10-24T00:17:58+00:00","category":"infrastructure","confidence":0.8,"triage":{"at":"2026-10-23T22:32:54Z","model":"claude-haiku-5-5","output":{"fix":"Update to Xcode 27 or later.","reach":"local","title":"Xcode: malicious app can break out of its sandbox","impact":"high","summary":"A malicious app can escape its macOS sandbox because some affected binaries did not enforce library validation. Apple says the fix is in Xcode 27.","category":"infrastructure","who_cares":["xcode","macos","apple-developers"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Malicious app escapes sandbox and gains broader local access.","analyst_note":"Sources do not name the affected binaries or the vulnerable Xcode versions; check Apple's security notes for the CVE-2026-86949 entry.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["xcode-not-installed"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000445,"input_tokens":2851,"output_tokens":319,"severity_before":"high"},"analyst_status":"done","analyst_note":"Sources do not name the affected binaries or the vulnerable Xcode versions; check Apple's security notes for the CVE-2026-86949 entry.","search":"'-2026':11A,14A '-86949':12A,15A '14':55B '19':61B '2026':56B '26.6':70B '27':52B,94C 'abl':100C 'add':59B 'address':79C 'advisori':57B 'affect':65B,86C 'app':3A,28B,97C 'appl':18B,47B,62B 'apple-develop':17B 'binari':38B,87C 'break':5A,30B,102C 'cve':10A,13A 'develop':19B 'enforc':44B,81C 'entri':58B 'escap':24B 'exploit':74B 'fix':48B,91C 'infrastructur':20B 'issu':77C,89C 'later':72B 'librari':45B,82C 'list':63B 'maco':21B,34B,68B 'malici':2A,27B,96C 'may':98C 'oct':60B 'platform':66B 'releas':53B 'report':75B 'sandbox':9A,23B,35B,106C 'sandbox-escap':22B 'sept':54B 'ship':39B 'taho':69B 'valid':46B,83C 'xcode':1A,16A,25B,41B,51B,93C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T01:17:28+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86949","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86949","severity":null,"published_at":"2026-10-20T01:17:28+00:00","modified_at":"2026-10-21T04:18:11+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-86949:632","url":null,"severity":null,"published_at":"2026-10-24T00:17:58+00:00","modified_at":"2026-10-24T00:17:58+00:00","first_seen_at":"2026-10-24T00:17:58+00:00","fetched_at":"2026-10-24T00:17:58+00:00","note":"Apple's Xcode 27 security content (support.apple.com/en-us/149040) lists CVE-2026-86949 under the Xcode component, credited to Ilya Andr (andrd3v) of Positive Technologies. Apple does not name the affected binaries. No exploitation or public PoC found; I did not search X or Bluesky."}],"documents":[{"id":2532,"url":"https://support.apple.com/en-us/149040","title":"About the security content of Xcode 27","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":2533,"url":"https://www.cve.org/CVERecord?id=CVE-2026-86949","title":"CVE Record: CVE-2026-86949","kind":"other","source":"analyst","text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}