Not yet rated — under the NVD policy in effect since April 2026, most CVEs are no longer analyzed immediately. The EPSS score (if available) is still shown.
Description
This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.