VYPR

Software Center

by Arturia

CVEs (2)

  • CVE-2026-24063HigMar 18, 2026
    risk 0.53cvss 8.2epss 0.00

    When a plugin is installed using the Arturia Software Center (MacOS), it also installs an uninstall.sh bash script in a root owned path. This script is written to disk with the file permissions 777, meaning it is writable by any user. When uninstalling a plugin via the Arturia…

  • CVE-2026-24062HigMar 18, 2026
    risk 0.51cvss 7.8epss 0.00

    The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code signature validation when a client connects. This leads to an attacker being able to connect to the helper and execute privileged actions leading to local privilege…