This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. An app may be able to break out of its sandbox.
| Software | From | Fixed in |
|---|---|---|
| apple / ipados | - | 26.1 |
| apple / iphone_os | - | 26.1 |
| apple / macos | - | 14.8.2 |
| apple / macos | 15.0 | 15.7.2 |
| apple / tvos | - | 26.1 |
| apple / visionos | - | 26.1 |
| apple / watchos | - | 26.1 |