Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-59683

OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths (extension of CVE-2026-59682). This allows either a full system compromise from local or remote (if the daemon is running as root) or a full account takeover (if the daemon is running in user context).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CalcProgrammer1 OpenRGB

Default version status: unaffected

  • 0 to ≤ 1.0rc3affected

References