CVE-2023-36177

CriticalCVSS 9.8

Published: 23/01/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

27.32%

98th percentile - higher than 98% of all known CVEs

Summary

A vulnerability in Snapcast version 0.27.0 allows remote attackers to execute arbitrary code and obtain sensitive information via a crafted request to the JSON-RPC API.

Risk Assessment

An attacker could take control of the Snapcast server, steal data, or disrupt audio services, posing a serious threat to system confidentiality and integrity.

Recommendation

Immediately update Snapcast to the latest available version and restrict access to the JSON-RPC API to trusted networks only.

Original NVD description (English source)

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API.