Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2026-3091

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service duri

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
synology

Description

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Synology Synology Presto Client

Default version status: affected

  • * to < 2.1.3-0672affected

References