Vulnerabilities

TI-2026-19398 CVE-2026-24071 · GHSA-xp6c-hp7c-5vjx

XPC Client Validation via PID leading to Local Privilege Escalation in Native Instruments Native Access

HIGH 69

It was found that the XPC service offered by the privileged helper of Native Access uses the PID of the connecting client to verify its code signature.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00155 Published 2026-02-02 No fix listed CWE-367

TI-2026-19397 CVE-2026-24070 · GHSA-mgr2-7wx9-9cgc

Local Privilege Escalation via DYLIB Injection in Native Instruments Native Access

HIGH 73

During the installation of the Native Access application, a privileged helper `com.native-instruments.NativeAccess.Helper2`, which is used by Native Access to trigger functions via XPC communication like copy-file, remov…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00222 Published 2026-02-02 Fixed in 3.24 CWE-426

Vulnerabilities

Filters

XPC Client Validation via PID leading to Local Privilege Escalation in Native Instruments Native Access

Local Privilege Escalation via DYLIB Injection in Native Instruments Native Access