CVE-2026-112605 is a vulnerability in Apple Xcode
Published on October 30, 2026
This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.
Vulnerability Analysis
CVE-2026-112605 can be exploited with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.
Weakness Type
What is an insecure temporary file Vulnerability?
The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
CVE-2026-112605 has been classified to as an insecure temporary file vulnerability or weakness.
Products Associated with CVE-2026-112605
Want to know whenever a new CVE is published for Apple Xcode? stack.watch will email you.
Affected Versions
Apple Xcode:- Before 27.2 is affected.