CVE-2026-24062 — Insufficient XPC Client validation leading to local privilege escalation in Arturia Software Center

CVE-2026-24062

Insufficient XPC Client validation leading to local privilege escalation in Arturia Software Center PUBLISHED

Description (CNA)

The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code signature validation when a client connects. This leads to an attacker being able to connect to the helper and execute privileged actions leading to local privilege escalation.

Affected (CNA)

Vendor / product	Versions
Arturia / Software Center	affected 2.12.0.3157

CWE

CWE-306

References

https://r.sec-consult.com/arturia

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.