Native Access vulnerabilities

2 known vulnerabilities in Native Access from Native Instruments. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Native Access: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2026-24071Feb 2, 2026Native Instruments

  It was found that the XPC service offered by the privileged helper of Native Access uses the PID of the connecting client to verify its code signature. This is considered insecure and can be exploited by PID reuse attacks. The connection handler function uses

• 8.8 High severity

  Native Access: Untrusted Search Path

  CVE-2026-24070Feb 2, 2026Native Instruments

  During the installation of the Native Access application, a privileged helper `com.native-instruments.NativeAccess.Helper2`, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as wel