Slate Digital Connect 1.37.0 XPC Service toctou

Summaryinfo

A vulnerability identified as problematic has been detected in Slate Digital Connect 1.37.0. This affects an unknown part of the component XPC Service. This manipulation causes toctou. This vulnerability is handled as CVE-2026-24067. It is possible to launch the attack on the local host. There is not any exploit available.

Detailsinfo

A vulnerability was found in Slate Digital Connect 1.37.0. It has been declared as problematic. Affected by this vulnerability is some unknown functionality of the component XPC Service. The manipulation with an unknown input leads to a toctou vulnerability. The CWE definition for the vulnerability is CWE-367. The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes the XPC service com.slatedigital.connect.privileged.helper.tool2. The helper validates connecting XPC clients by obtaining the client's process identifier and using it to retrieve code-signing information for the process. This PID-based client validation is subject to a time-of-check time-of-use race condition because process identifiers can be reused. A local attacker can exploit PID reuse so that validation is performed against a trusted process instead of the original connecting process. This allows unauthorized access to privileged helper functionality and may lead to local privilege escalation.

The weakness was released by Florian Haselsteiner. The advisory is shared at r.sec-consult.com. This vulnerability is known as CVE-2026-24067 since 01/21/2026. The exploitation appears to be difficult. An attack has to be approached locally. Neither technical details nor an exploit are publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-36000). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Slate Digital

Name

• Connect

Version

• 1.37.0

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion