Earlier releases of Apple Xcode allowed apps to load unsigned libraries because the binaries lacked library validation. This shortcoming, a mix of access control and privilege management weaknesses (CWE‑284, CWE‑693, CWE‑829), lets a maliciously crafted application bypass the sandbox. By loading unsigned binaries the app can execute code with the privileges of the user, potentially leading to full system compromise.

The vulnerability affects Apple Xcode, specifically versions prior to Xcode 27. The fix is included in Xcode 27, which enforces library validation on all app binaries.

The CVSS score of 7.8 indicates high severity, and the EPSS score of less than 1 % suggests that active exploitation is rare. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack path requires an attacker to deliver a malicious signed app that includes an unsigned library; the missing validation step allows the library to load during app launch. Because sandbox escape can lead to executing arbitrary code as the user, the risk to stakeholders is significant, although it requires control over the app build or distribution chain.