PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-24067 Slate Digital LLC CVE debrief

CVE-2026-24067 is a HIGH-severity vulnerability (CVSS Score: 8.4) affecting Slate Digital Connect 1.37.0 for macOS. The vulnerability arises from a time-of-check time-of-use (TOCTOU) race condition in the privileged helper tool, com.slatedigital.connect.privileged.helper.tool. This tool exposes an XPC service that validates connecting clients based on their process identifier (PID). However, due to PID reuse, a local attacker can exploit this vulnerability to gain unauthorized access to the privileged helper tool's functionality, potentially leading to local privilege escalation.

Vendor
Slate Digital LLC
Product
Slate Digital Connect
CVSS
HIGH 8.4
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-10
Original CVE updated
2026-06-10
Advisory published
2026-06-10
Advisory updated
2026-06-10

Who should care

Users of Slate Digital Connect 1.37.0 for macOS, administrators of systems where Slate Digital Connect is installed, and security teams responsible for monitoring and mitigating local privilege escalation vulnerabilities.

Technical summary

The vulnerability is caused by a TOCTOU race condition in the PID-based client validation mechanism of the com.slatedigital.connect.privileged.helper.tool XPC service. An attacker can exploit this by reusing a PID to trick the validation process into trusting a different process, thereby gaining access to privileged functionality.

Defensive priority

High

Recommended defensive actions

  • Apply the latest security patches or updates for Slate Digital Connect 1.37.0 for macOS as soon as available.
  • Restrict access to the Slate Digital Connect application and its helper tools to trusted users only.
  • Monitor system logs for suspicious activity related to Slate Digital Connect and its privileged helper tool.
  • Consider implementing additional security measures such as strict access controls and monitoring of system calls related to process creation and XPC services.

Evidence notes

The vulnerability was reported by Sec Consult, as referenced in [ref-4](https://r.sec-consult.com/slate) and [ref-5](https://sec-consult.com/vulnerability-lab/advisory/local-privilege-escalation-in-slate-digital-connect/).

Official resources

CVE-2026-24067 was published on 2026-06-10T12:16:25.340Z and modified on 2026-06-10T20:12:28.193Z.