EUVD-2026-66380
GHSA-26mm-mg9c-fjp5
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible protocol with no authentication (PR:N, UI:N, AV:N) enables arbitrary file overwrite as root (I:H, C:H, A:H); no scope change required as the daemon already operates at root privilege.
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Primary rating from Vendor (CNA).
CVSS VectorVendor
Lifecycle Timeline
1Description PRE-NVD
AnalysisAI
Remote unauthenticated arbitrary file overwrite in OpenRGB's custom TCP network protocol (port 6742) allows any network-reachable attacker to overwrite arbitrary files on the host by sending a crafted SAVE_PROFILE message with an attacker-controlled file path. When the daemon is deployed as a systemd service running with full root privileges - as packaged in openSUSE Tumbleweed - this file overwrite primitive translates directly into trivial full remote system compromise. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The OpenRGB daemon must be running in server mode (launched with the --server flag, as configured in the openSUSE Tumbleweed systemd unit). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The combination of signals here indicates a genuine critical-priority vulnerability, not a high-CVSS-but-low-real-risk case. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to OpenRGB 1.0rc3-hotfix, which upstream confirms addresses the worst aspects of the flaws in this report; consult the openSUSE advisory at https://security.opensuse.org/2026/08/25/openrgb-remote-vulnerabilities.html and the oss-security post at https://seclists.org/oss-sec/2026/q3/572 for distribution-specific guidance. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-73 – External Control of File Name or Path
View allSame technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| openSUSE Tumbleweed | Fixed |
Share
External POC / Exploit Code
Leaving vuln.today