CVE-2024-14032
HIGH
NVD
CVSS Score
7.8
Severity
HIGH
Published
Apr 06, 2026
Vendor
unknown
Description
Twitch Studio version 0.114.8 and prior contain a privilege escalation vulnerability in its privileged helper tool that allows local attackers to execute arbitrary code as root by exploiting an unprotected XPC service. Attackers can invoke the installFromPath:toPath:withReply: method to overwrite system files and privileged binaries, achieving full system compromise. Twitch Studio was discontinued in May 2024.