CVE-2026-18794
HighCVSS 8.2Summary
The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data.
Risk Assessment
The attack can lead to service crashes or data integrity compromise, and in extreme cases to remote code execution.
Recommendation
Update OpenRGB to the latest version that includes fixes for this issue. Restrict access to the OpenRGB network port to trusted hosts only.
Other vulnerabilities in OpenRGB
See all- CVE-2026-59683Critical
The OpenRGB network protocol allows writing attacker-controlled strings to arbitrary file system paths (extension of CVE-2026-59682). This can lead to full system compromise from local or remote (if the daemon runs as root) or full account takeover (if the daemon runs in user context).
- CVE-2026-59682Critical
Arbitrary file overwrite via SAVE_PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3.
Original NVD description (English source)
The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data.