PT-2026-59233

Summary Langroid's ReadFileTool and WriteFileTool appear to treat curr dir as the intended working-directory boundary for file operations. However, the tools only change the process working directory to curr dir and then operate on the user-supplied file path without resolving and enforcing that...

CVE-2026-27008: External Control of File Name or Path

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a bug in download skill installation allowed targetDir values from skill frontmatter to resolve outside the per-skill tools directory if not strictly validated. In the admin-only skills.install flow, this could write files outside t...

Apple Xcode Sandbox Check Insufficiency Vulnerability

Apple Xcode is an integrated development tool that runs on the operating system Mac OS X. It is used for the development of the Mac OS X software. Apple Xcode suffers from an insufficient sandbox checking vulnerability that can be exploited by an attacker to read and write files outside the sandb...

CVE-2025-43263

The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write files outside of its sandbox...

CVE-2025-43263

The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write files outside of its sandbox...

CVE-2025-43263

The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write files outside of its sandbox...

CVE-2025-43263

The Xcode integrated development environment for MacOS is vulnerable to an improper access control issue within the IDE CoreML component. Due to insufficient sandbox checking , an attacker could bypass sandbox protection mechanisms, allowing an application to read and write files outside of its d...

PT-2025-37794

Name of the Vulnerable Software and Affected Versions: Xcode versions prior to 26 Description: An application may be able to read and write files outside of its designated sandbox. This is due to insufficient checks. Recommendations: Update to Xcode version 26...

Apple Xcode 安全漏洞

Apple Xcode is an integrated development tool that runs on the operating system Mac OS X. It is used for the development of the Mac OS X software. Apple Xcode suffers from an insufficient sandbox checking vulnerability that can be exploited by an attacker to read and write files outside the sandb...