"However, it turns out that the fix was not complete as one can still abuse invokeWithArguments method to setup calls to invokeExact method with a trusted system class as a target method caller, " Gowdiak wrote.
Working with trusted partners, Ford is completing beta-testing on the SDK. Once beta-testing is complete, a broader release of the development tools is planned for later this year.