CVE-2026-24071

It was found that the XPC service offered by the privileged helper of Native Access uses the PID of the connecting client to verify its code signature. This is considered insecure and can be exploited by PID reuse attacks. The connection handler function uses xpcconnectiongetpidarg2 as argument f...

CVE-2026-24071

The Native Access software, provided by Native Instruments, contains an XPC service vulnerability within its privileged helper. The service insecurely uses the PID of connecting clients to verify code signatures, specifically utilizing _xpc_connection_get_pid(arg2) as an argument for the hasValid...