Native Instruments Native Access vulnerabilities

Latest Native Instruments Native Access CVEs

Newest publication first

1. CVE-2026-24071 XPC Client Validation via PID leading to Local Privilege Escalation in Native Instruments Native Access

   Published 2026-02-02

   High·CVSS 7.8 EPSS 0.16%

   It was found that the XPC service offered by the privileged helper of Native Access uses the PID of the connecting client to verify its code signature. This is considered insecure and can be exploited by PID reuse attacks. The connection handler function uses _xpc_connection_get_...

2. CVE-2026-24070 Local Privilege Escalation via DYLIB Injection in Native Instruments Native Access

   Published 2026-02-02

   High·CVSS 8.8 EPSS 0.22%

   During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication w...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.