PT-2026-28337 · Unknown · Vienna Assistant

Florian Haselsteiner · Published 2026-03-26 · Updated 2026-03-27 · CVE-2026-24068

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vienna Assistant (affected versions not specified)

Description The Vienna Assistant privileged helper utilizes NSXPC for Inter-Process Communication (IPC). The implementation of the shouldAcceptNewConnection function, used by the NSXPC framework to validate client connections to the XPC listener, does not perform any client validation. This allows any process to connect to the service using the configured protocol and call all functions defined in the HelperToolProtocol. Specifically, the functions writeReceiptFile and runUninstaller within the HelperToolProtocol lack validation, enabling an attacker to write files to any location with arbitrary data and execute any file with any arguments. The absence of XPC client validation allows any process to invoke these functions, leading to privilege escalation. The vendor was unresponsive and did not provide a patch.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-24068

Affected Products

Vienna Assistant

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-24068 · Security Note
• https://twitter.com/autumn_good_35/status/2037514207911108779 · Twitter Post
• https://twitter.com/CVEnew/status/2037137710045868311 · Twitter Post
• https://r.sec-consult.com/vsl · Note
• http://seclists.org/fulldisclosure/2026/Apr/3 · Note