CVE-2022-46640

CriticalCVSS 9.8

Published: 18/04/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.86%

77th percentile - higher than 77% of all known CVEs

A command injection vulnerability was discovered in the Nanoleaf Desktop App before version 1.3.1, which is exploited via a crafted HTTP request.

An attacker can remotely execute arbitrary system commands on the victim's computer, leading to full system compromise and data theft.

Immediately update the Nanoleaf Desktop App to version 1.3.1 or later, and restrict access to the application from trusted networks only.

Original NVD description (English source)

Nanoleaf Desktop App before v1.3.1 was discovered to contain a command injection vulnerability which is exploited via a crafted HTTP request.