This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, visionOS 2.1, macOS Sonoma 14.7.1, watchOS 11.1, tvOS 18.1. A malicious app may be able to access private information.
https://support.apple.com/en-us/121570
https://support.apple.com/en-us/121569
https://support.apple.com/en-us/121566