{"id":"CVE-2026-112605","state":"PUBLISHED","title":"This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.","description":"This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.","publishedAt":"2026-10-30T00:26:44.082Z","updatedAt":"2026-10-30T00:26:44.082Z","severity":null,"assigner":"apple","products":["Apple Xcode"],"affected":[{"vendor":"Apple","product":"Xcode","versions":[{"version":"0","status":"affected","lessThan":"27.2","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/149589"],"weaknesses":[],"ingestedAt":"2026-10-30T00:42:06.548Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/112xxx/CVE-2026-112605.json","commit":"f2d9c0cd2d318104f2c83e3c222afbb3de255dfb","baselineCommit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-112605","state":"PUBLISHED","datePublished":"2026-10-30T00:26:44.082Z","dateUpdated":"2026-10-30T00:26:44.082Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2026-10-19T17:05:22.984Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files."}],"affected":[{"vendor":"Apple","product":"Xcode","versions":[{"version":"0","status":"affected","lessThan":"27.2","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/149589"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An app may be able to read arbitrary files"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-10-30T00:26:44.082Z"}}}}}