Waves Central vulnerabilities

Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement. A local, authenticated user can execute code within the vendor-signed process, satisfy the helper's client check, and cause the helper to execute a script with root privileges.

A local privilege escalation vulnerability in Waves Central for macOS versions 13.0.9 through 16.5.5 exists in the privileged helper service. An attacker can exploit a race condition in PID validation to execute code as root. Fixed in version 16.6.2.

Waves Central for macOS versions 13.0.9 through 16.5.5 has a local privilege escalation vulnerability. A trusted XPC client component is signed with entitlements allowing dynamic library injection, enabling a local attacker to execute arbitrary code as root.