CVE-2026-108830
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
A weakness was identified in meetecho janus-gateway up to 1.4.2, affecting src/plugins/janus_videoroom.c of the VideoRoom component, causing a race condition. Remote exploitation is possible but has high complexity and is difficult. A patch named 27c0d1af888153e818675b56a4e6267f62d57097 is available.
Risk Assessment
The vulnerability may lead to unpredictable system behavior, potentially enabling disruption or privilege escalation, but requires advanced skills.
Recommendation
It is recommended to apply the provided patch or update to a version that includes the fix.
Other vulnerabilities in janus-gateway
Original NVD description (English source)
A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugins/janus_videoroom.c of the component VideoRoom. This manipulation causes race condition. Remote exploitation of the attack is possible. The attack's complexity is rated as high. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks. Patch name: 27c0d1af888153e818675b56a4e6267f62d57097. Applying a patch is the recommended action to fix this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS