The vulnerability arises from a failure to enforce library validation on binaries, allowing a maliciously crafted application to execute beyond its intended sandbox with elevated privileges. An attacker could therefore execute arbitrary code, exfiltrate data, or compromise the entire system if an app built with the affected Xcode version is installed.

The issue is specific to Apple Xcode, with the fix implemented in Xcode 27. Versions of Xcode older than 27 are potentially affected; no finer version breakdown is provided.

Exact exploitation probability is unknown because EPSS is < 1% and the CVSS score is 8.8. The vulnerability is not catalogued in CISA’s KEV, suggesting no confirmed widespread exploitation yet. Attack would likely involve a malicious developer or installer who can compile an application with an older Xcode release, then deploy it to a target device. Risk is mitigated mainly by the need for the attacker to have access to the build environment, but the inherent impact of a sandbox escape remains severe.