CVE-2026-48046
CriticalCVSS 9.3Summary
Streambert before 2.5.0 has an unvalidated auto-updater URL vulnerability that allows a compromised renderer to make the main process download and execute an arbitrary binary, resulting in remote code execution.
Risk Assessment
An attacker can take over the application and system by executing malicious code in the app's context.
Recommendation
Upgrade Streambert to version 2.5.0 or later. Verify update integrity and restrict access to the main process.
Original NVD description (English source)
Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 contain an unvalidated auto-updater URL vulnerability that allows a compromised renderer process to make the main process download and execute an arbitrary binary, resulting in remote code execution. Version 2.5.0 contains a patch.