VOCALOID6 Editor CVE-2026-104679

Exploitation requires the victim to open a specially crafted VOCALOID6 project file in the VOCALOID6 Editor; the vulnerability stems from the editor's XML parser not restricting external entity references (XXE) when loading project files. Limiting factors: the attack vector is local (AV:L) and demands user interaction (UI:R) - the attacker cannot trigger it remotely or without the user actively loading the malicious file - which substantially narrows realistic exploitation to social-engineering-based file delivery. No authentication or special privileges on the attacker side are needed (PR:N), and default configurations appear affected since the issue is improper default restriction of external entities.

This is a genuine but not emergency-priority vulnerability. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R) confirms this is NOT a remotely triggerable flaw: although PR:N means no attacker privileges are required, AV:L plus UI:R means the attack only fires when a victim locally opens a specially crafted VOCALOID6 project file - this is a file-parsing (XXE) class issue, not a network-reachable service bug. Impact is split: C:H (exfiltration of sensitive local files via external entity resolution) and A:H (denial of service), with no integrity impact (I:N), consistent with classic CWE-611 behavior. No EPSS score, no CISA KEV listing, and no public POC were provided in the intelligence set, so this is 'no public exploit identified at time of analysis.' The signals are internally consistent - there is no conflict between the network-vector language and the vector here, since the vendor correctly scored it as local/user-interaction-dependent. Net: for a consumer/prosumer music-production tool with a required-user-interaction local vector and no evidence of exploitation, this is a real but moderate-urgency patch item rather than a drop-everything priority.

An attacker distributes a malicious VOCALOID6 project file (e.g., via a shared song project, forum download, or email attachment) containing a crafted XML external entity. When the victim opens the file in the VOCALOID6 Editor, the XML parser resolves the external entity, causing the application to read a local sensitive file and/or initiate outbound communication to exfiltrate it, or to hang/crash in a denial-of-service condition. No public exploit code was identified at time of analysis, but XXE payloads are well-documented and trivial to construct.