CVE-2026-59683
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
The OpenRGB network protocol allows writing attacker-controlled strings to arbitrary file system paths (extension of CVE-2026-59682). This can lead to full system compromise from local or remote (if the daemon runs as root) or full account takeover (if the daemon runs in user context).
Risk Assessment
Risk of full system compromise or account takeover, depending on the privileges of the OpenRGB daemon.
Recommendation
Update OpenRGB to the latest version and run the daemon with least privileges.
Other vulnerabilities in OpenRGB
See allOriginal NVD description (English source)
The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths (extension of CVE-2026-59682). This allows either a full system compromise from local or remote (if the daemon is running as root) or a full account takeover (if the daemon is running in user context).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS