cve-2026-28912

CVE-2026-28912 — Reverse engineering notes and reproduction Independent reverse engineering of the macOS PackageKit symlink-following bug CVE-2026-28912, plus a working PoC that demonstrates the installer writing an attacker-controlled file as root through a directory symlink in the install...