Twitch Studio LauncherHelper XPC Missing Authorization to Root File Write
Vulnerability Description
Twitch Studio version 0.114.8 and prior contain a privilege escalation vulnerability in its privileged helper tool that allows local attackers to execute arbitrary code as root by exploiting an unprotected XPC service. Attackers can invoke the installFromPath:toPath:withReply: method to overwrite system files and privileged binaries, achieving full system compromise. Twitch Studio was discontinued in May 2024.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-14032
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Christopher Lopez
References
Affected Vendor
Twitch
View all reports →