CVE-2026-59683 — OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings
The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths (extension of CVE-2026-59682). This allows either a full system comprom…
Published: 2026-08-26 · CVSS: 9.3 · CVSS 4.0
The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths (extension of CVE-2026-59682). This allows either a full system compromise from local or remote (if the daemon is running as root) or a full account takeover (if the daemon is running in user context).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7