This vulnerability involves an improper privilege control flaw in Apple Xcode that could allow a compiled application to break out of its sandbox. The impact is that a malicious or compromised app could gain elevated privileges and execute actions beyond its intended isolation boundaries. The flaw maps to CWE‑284. No additional complexity is noted in the description.

Apple Xcode is the affected vendor. Versions prior to Xcode 26 are vulnerable, as the fix was applied in Xcode 26. The vulnerability is present in all builds of Xcode that precede version 26. No specific distribution revisions are listed, so every earlier release must be considered at risk.

The CVSS score of 8.2 indicates high severity. The EPSS score of less than 1% suggests the exploit is currently unlikely to be seen in the wild. The vulnerability is not currently in the CISA KEV catalog. The likely attack vector is local, via a malicious or compromised app built with the vulnerable Xcode version, which can then escape its sandbox to affect system resources or other applications.