CVE-2026-24070

CVE-2026-24070 describes a local privilege escalation in Native Instruments Native Access. The installer deploys a privileged helper (com.native-instruments.NativeAccess.Helper2) used via XPC to perform actions like copy-file, remove, or set-permissions. The XPC service restricts access to client...

CVE-2026-24071

CVE-2026-24071 affects Native Instruments Native Access. The XPC service’s privileged helper uses the connecting client’s PID as input to hasValidSignature, which is insecure because PID values are untrusted and can be reused. This enables a local attacker to potentially bypass signature checks a...