TI-2026-59363 Aliases CVE-2026-86819 GHSA-pvv8-qxr5-pq93

Waves Central local privilege escalation via Improper XPC Client Authentication in macOS

LOW 37CWE-862Published 2026-09-08 · Updated 2026-09-14

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · None
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-862.

Summary

Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement (application identifier and Team ID). A local, authenticated user can execute code within the vendor-signed process, satisfy the helper's client check, and cause the helper to execute a script with root privileges. Fixed in 17.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.001 0th percentileScored 2026-11-07

Fix Fixed Waves Central (Waves Audio Ltd.): 17.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Waves Audio Ltd.	Waves Central	16.6.2 to before 17.0	17.0	Patch available	CNA

Waves Central VendorWaves Audio Ltd. Affected 16.6.2 to before 17.0 Fixed in 17.0 Patch available CNA

Remediation

Fix · CNA Waves Central (Waves Audio Ltd.) Fixed in 17.0

Timeline

2026-10-02 Threatist record created from CVE-2026-86819
2026-10-03 Alias added: GHSA-pvv8-qxr5-pq93

References

Advisory 1

Other 2

TI-2026-19392 Local Privilege Escalation via Insecure XPC Client Validation in Waves Central for macOS CVSS 3.1HIGH 8.1
TI-2026-19391 Local Privilege Escalation via Dynamic Library Injection in Waves Central for macOS CVSS 3.1HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences