CVE-2026-86819
HighCVSS 7.1Summary
Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement. A local, authenticated user can execute code within the vendor-signed process, satisfy the helper's client check, and cause the helper to execute a script with root privileges.
Risk Assessment
A local user can gain full root privileges on the Mac, enabling complete control over the system and data.
Recommendation
Update Waves Central to version 17.0 or later, which includes the fix.
Other vulnerabilities in Waves Central
See all- CVE-2026-24065High
A local privilege escalation vulnerability in Waves Central for macOS versions 13.0.9 through 16.5.5 exists in the privileged helper service. An attacker can exploit a race condition in PID validation to execute code as root. Fixed in version 16.6.2.
- CVE-2026-24064High
Waves Central for macOS versions 13.0.9 through 16.5.5 has a local privilege escalation vulnerability. A trusted XPC client component is signed with entitlements allowing dynamic library injection, enabling a local attacker to execute arbitrary code as root.
Original NVD description (English source)
Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement (application identifier and Team ID). A local, authenticated user can execute code within the vendor-signed process, satisfy the helper's client check, and cause the helper to execute a script with root privileges. Fixed in 17.0.