Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-48056

Streambert Vulnerable to Arbitrary Binary Execution via Downloader IPC Handler

Description

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the  run-download  IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s privileges. Version 2.5.0 contains a patch.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

truelockmc streambert

  • < 2.5.0affected

References