CVE-2026-28889 - A permissions issue was addressed with additional restrictions

Back Back to CVE browser

MEDIUM

A permissions issue was addressed with additional restrictions

Published Mar 25, 2026

6.2

MEDIUM

CVSS 3.1

EPSS 0.15%

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4. An app may be able to read arbitrary files as root.

Affected products

Vendor Apple Product Xcode Default
unknown
Affected
- ≥ 0, < 26.4

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Apple	Xcode	unknown	Affected ≥ 0, < 26.4

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-15167
Advisory
https://support.apple.com/en-us/126801
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-15167		Advisory
https://support.apple.com/en-us/126801		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Mar 25, 2026

Updated Apr 2, 2026

Reserved Mar 3, 2026

Link CVE-2026-28889

CISA Vulnrichment

Updated Mar 25, 2026

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2026-28889

Red Hat

No data

ENISA EUVD

Assigner apple

Published Mar 25, 2026

Updated Apr 2, 2026

Link EUVD-2026-15167

GitHub

No data