Arbitrary Code Execution in macOS DigiD App by DigiD

CVE-2026-103316

What is CVE-2026-103316?

The DigiD app for macOS is susceptible to arbitrary code execution due to the absence of Hardened Runtime signing. This flaw allows local attackers to exploit the DYLD_INSERT_LIBRARIES environment variable to inject dynamic libraries into the DigiD application. Consequently, an attacker with local user-level code execution can gain unauthorized access to sensitive DigiD data and cryptographic functions, potentially undermining user security.

References