CVE-2026-86819

Summary

Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement (application identifier and Team ID). A local, authenticated user can execute code within the vendor-signed process, satisfy the helper's client check, and cause the helper to execute a script with root privileges. Fixed in 17.0.

Affected Software

VendorProductVersion RangeStatus
Waves Audio Ltd.Waves Central16.6.2 < 17.0affected
Waves Audio Ltd.Waves Central17.0unaffected

Weaknesses

  • CWE-862: CWE-862 Missing Authorization

References