CVEvulnerability

CVE-2026-48056

10.0 CRITICAL Published 2026-08-11 Modified 2026-10-23 Official page ↗

Status: Deferred
Published: 2026-08-11
Last modified: 2026-10-23
Assigner: [email protected]
CVSS 3.1 ([email protected]): 10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses: CWE-20, CWE-749

Description

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s privileges. Version 2.5.0 contains a patch.

Weakness · CWE (2)

CWE-20 Improper Input Validation weakness
CWE-749 Exposed Dangerous Method or Function weakness

References

https://github.com/truelockmc/streambert/releases/tag/2.5.0 github.com
https://github.com/truelockmc/streambert/security/advisories/GHSA-x267-77m6-qjc9 github.com
https://github.com/truelockmc/streambert/security/advisories/GHSA-x267-77m6-qjc9 github.com

CVE-2026-48056

Description

Related

Weakness · CWE (2)

References