CVE-2026-24068

The VSL privileged helper does utilize NSXPC for IPC. The implementation of the "shouldAcceptNewConnection" function, which is used by the NSXPC framework to validate if a client should be allowed to connect to the XPC listener, does not validate clients at all. This means that any process can connect to this service using the configured protocol. A malicious process is able to call all the functions defined in the corresponding HelperToolProtocol. No validation is performed in the functions "writeReceiptFile" and “runUninstaller” of the HelperToolProtocol. This allows an attacker to write files to any location with any data as well as execute any file with any arguments. Any process can call these functions because of the missing XPC client validation described before. The abuse of the missing endpoint validation leads to privilege escalation.

• CWE-306

• https://r.sec-consult.com/vsl
• http://seclists.org/fulldisclosure/2026/Apr/3

Published

Mar 26, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-24062The "Privileged Helper" component of the Arturia Software Ce…7.8
• CVE-2026-24063When a plugin is installed using the Arturia Software Center…8.2
• CVE-2026-24064Waves Central for macOS versions 13.0.9 through 16.5.5 conta…7.8
• CVE-2026-24065Waves Central for macOS versions 13.0.9 through 16.5.5 conta…8.1
• CVE-2026-24066Slate Digital Connect 1.37.0 for macOS installs a privileged…8.4
• CVE-2026-24067Slate Digital Connect 1.37.0 for macOS installs a privileged…8.4
• CVE-2026-24069Kiuwan SAST improperly authorizes SSO logins for locally dis…5.4
• CVE-2026-24070During the installation of the Native Access application, a …8.8
• CVE-2026-24071It was found that the XPC service offered by the privileged …7.8
• CVE-2026-24072An escalation of privilege bug in various modules in Apache …8.8
• CVE-2026-24076Memory Corruption when processing registry values with incor…6.7
• CVE-2026-24077Information Disclosure when processing wireless network chan…6.5