CVE-2025-5255: The Phoenix Code's configuration on macOS, specifically the presence of entitlements: "com.apple.security.cs.allow-dyld-

Phoenix Code on macOS has a security weakness where certain entitlements (special permissions) allow dylib injection, which means an attacker with basic system access can secretly load malicious code into applications and bypass TCC (Transparency, Consent, and Control, Apple's permission system). The injected code can only access resources the user previously allowed, though accessing new resources requires user confirmation through a system prompt.