Arturia vulnerabilities

Products

• Software Center 2

Latest Arturia CVEs

Newest publication first

1. CVE-2026-24063 World-writable uninstall script executed as root in Arturia Software Center

   Published 2026-03-18

   High·CVSS 8.2 EPSS 0.14%

   When a plugin is installed using the Arturia Software Center (MacOS), it also installs an uninstall.sh bash script in a root owned path. This script is written to disk with the file permissions 777, meaning it is writable by any user. When uninstalling a plugin via the Arturia So...

2. CVE-2026-24062 Insufficient XPC Client validation leading to local privilege escalation in Arturia Software Center

   Published 2026-03-18

   High·CVSS 7.8 EPSS 0.13%

   The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code signature validation when a client connects. This leads to an attacker being able to connect to the helper and execute privileged actions leading to local privilege es...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.