Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2026-24067

Slate Digital Connect macOS XPC PID validation privilege escalation

High8.4EPSS 0.18%
Published
Updated
Reserved
Assigned by
SEC-VLab

Description

Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes the XPC service com.slatedigital.connect.privileged.helper.tool2. The helper validates connecting XPC clients by obtaining the client's process identifier and using it to retrieve code-signing information for the process. This PID-based client validation is subject to a time-of-check time-of-use race condition because process identifiers can be reused. A local attacker can exploit PID reuse so that validation is performed against a trusted process instead of the original connecting process. This allows unauthorized access to privileged helper functionality and may lead to local privilege escalation.

Scores

CVSS scores of CVE-2026-24067, by who scored it
Scored byCVSSScoreVector
CISA-ADPADP (enrichment)3.1High8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Deferred3.1High8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.18% · top 92% of all CVEs (6 Nov 2026)
CISA SSVC
Exploitation: poc · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.4.

Weakness

Affected products

What to do

Solution: The vendor did not respond to the disclosure attempts, and no fixed version was available at the time of publication. Update 2026-11-06: The vendor informs that v2.11.0 fixes the issue since 7th July 2026 now. Furthermore, the app name has changed and is now called Complete Access Hub since v2.0.0.

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2026-24067 badge
[![CVE-2026-24067](https://trackcve.app/badge/CVE-2026-24067.svg)](https://trackcve.app/cve/CVE-2026-24067)

Record last updated .