CVE-2026-45184

MediumCVSS 6.5

Published: 09/05/2026(UTC)Updated: 20/07/2026(UTC)Translated: 22/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

A vulnerability in Kdenlive before version 26.04.1 allows dangerous proxy parameters when opening an attacker-controlled project file.

Risk Assessment

An attacker can supply a malicious project file, leading to dangerous operations on the victim's system, potentially enabling control takeover or privilege escalation.

Recommendation

It is recommended to immediately update Kdenlive to version 26.04.1 or later and avoid opening project files from untrusted sources.

Original NVD description (English source)

Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project file is used.