CVE-2026-24063 - Vulnerability Analysis

Overview

Arturia Software Center on MacOS contains a privilege escalation vulnerability caused by an uninstall.sh script with writable permissions in a root-owned path, letting local attackers escalate privileges by modifying the script.

Severity & Score

Impact

Local attackers can escalate privileges to root by modifying the writable uninstall.sh script.

Mitigation

Restrict uninstall.sh script permissions and ensure it is not writable by unprivileged users.

References

• https://r.sec-consult.com/arturia

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 18, 2026

🟠 CVE-2026-24063 - High (8.2) When a plugin is installed using the Arturia Software Center (MacOS), it also installs an uninstall.sh bash script in a root owned path. This script is written to disk with the file permissions 777, meaning it is writable by any user. When uninsta... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24063/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner