The vulnerability allows a local attacker to inject a malicious dynamic library into a trusted Waves Central XPC client process on macOS using the DYLD_INSERT_LIBRARIES environment variable. Because the client runs with hardened runtime entitlements, the injected code executes with the same privileges and can communicate with a privileged helper service, leading to arbitrary root‑level code execution. This represents a direct compromise of system confidentiality, integrity, and availability.

Waves Audio Ltd. Waves Central for macOS version 13.0.9 through 16.5.5 is affected. The fix is provided in version 16.6.2 or later.

The exploit requires local access to set an environment variable, but once achieved it grants full root access, an extremely high impact attack. No EPSS score is available, and the vulnerability is not listed in CISA KEV, but the absence of a score does not mitigate the severity of the flaw. The CVSS score is not supplied but the nature of the flaw indicates high severity. The attack vector is local; the attacker must have the ability to launch the client process with a manipulated environment.