Permissions Issue in Xcode Affects File Access Capabilities
CVE-2026-28889

6.2MEDIUM

Key Information:

Vendor

Apple
Status
Xcode
Vendor
CVE Published:
25 March 2026

What is CVE-2026-28889?

A permissions issue has been discovered in Xcode that enables applications to potentially access arbitrary files with root privileges. This flaw is addressed in Xcode 26.4, which includes additional restrictions to mitigate the risk. Proper application security practices are essential to prevent unauthorized data access.

Affected Version(s)

Xcode 0 < 26.4

References

https://support.apple.com/en-us/126801

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.