PT-2026-5658 · Native Instruments · Native Access

Florian Haselsteiner · Published 2026-02-02 · Updated 2026-02-11 · CVE-2026-24071

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Native Access (affected versions not specified)

Description The XPC service within Native Access’s privileged helper is susceptible to a security issue. The service utilizes the process ID (PID) of connecting clients to validate code signatures, which is an insecure practice. This can be exploited through PID reuse attacks. The connection handler function, specifically xpc connection get pid(arg2), is used as an argument for the hasValidSignature function, but this value is not trustworthy due to the potential for PID reuse.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2026-24071

Affected Products

Native Access

References · 6

• 🔥 https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-native-instruments-native-access-macos · Exploit
• https://osv.dev/vulnerability/CVE-2026-24071 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24071 · Security Note
• https://t.me/cveNotify/151763 · Telegram Post
• https://t.me/CVEtracker/43507 · Telegram Post
• https://twitter.com/TheHackerWire/status/2018388464727998889 · Twitter Post