Apple Xcode Sandbox Escape Vulnerability in CoreML IDE

A vulnerability allowing apps to read and write files outside their designated sandbox has been identified in Apple Xcode. This issue affects users on macOS Sequoia 15.6 and later. The vulnerability arises from inadequate checks in the path handling process, which could potentially allow an app to break out of its sandbox restrictions.

Impact

Exploitation of this vulnerability could lead to unauthorized file access and modification outside of the app's sandbox, potentially compromising user data or system integrity.

Remediation

Users can update to Xcode 26 to address this vulnerability.