CVE Catalog
CVE-2026-48056
CriticalCVSS 10.0Summary
Streambert before 2.5.0 improperly validates executable paths supplied to the run-download IPC handler, allowing a compromised renderer to execute arbitrary local binaries with the app's privileges.
Risk Assessment
An attacker can execute malicious programs on the victim's machine, potentially leading to data theft or system takeover.
Recommendation
Upgrade Streambert to version 2.5.0 or later. Limit trust in renderer processes.
Original NVD description (English source)
Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s privileges. Version 2.5.0 contains a patch.