CVE-2026-59682
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
Arbitrary file overwrite via SAVE_PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3.
Risk Assessment
Risk of overwriting arbitrary files on the system, potentially leading to data corruption or privilege escalation.
Recommendation
Update OpenRGB to a version newer than 1.0rc3 if available, or restrict access to the network protocol.
Other vulnerabilities in OpenRGB
See all- CVE-2026-59683Critical
The OpenRGB network protocol allows writing attacker-controlled strings to arbitrary file system paths (extension of CVE-2026-59682). This can lead to full system compromise from local or remote (if the daemon runs as root) or full account takeover (if the daemon runs in user context).
- CVE-2026-18794High
The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data.
Original NVD description (English source)
Arbitrary file overwrite via SAVE_PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS