Which versions of OpenRGB are affected by CVE-2026-59683?

OpenRGB server instances running with root privileges are vulnerable to unauthenticated remote code execution; publicly available exploit code exists.

How to fix or mitigate CVE-2026-59683?

Within 24 hours, identify and inventory all OpenRGB server deployments; disable the service immediately if not mission-critical using systemctl disable openrgb, or restrict TCP port 6742 access to authorized hosts only using host firewall rules if the service is essential. Within 7 days, implement network segmentation to isolate OpenRGB systems from untrusted networks, enable network intrusion detection monitoring for port 6742 exploitation attempts, and document all affected systems and deployment context. Within 30 days, monitor OpenRGB project channels and vendor advisories for patch releases, deploy patches immediately upon availability, and evaluate alternative RGB lighting solutions with built-in authentication mechanisms.

OpenRGB CVE-2026-59683

Q: What is the CVSS score of CVE-2026-59683?

CVE-2026-59683 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.6%.

EUVD-2026-66359 CRITICAL

External Control of File Name or Path (CWE-73)

2026-08-25

GHSA-3c7q-x53x-mrfx

Information Disclosure Suse

9.3

CVSS 4.0 · Vendor

Severity by source

Vendor (CNA) PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

10.0 CRITICAL

Network-reachable unauthenticated protocol with no access controls; root-level execution context yields full C/I/A impact with scope change to the underlying system.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SUSE

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (CNA).

CVSS VectorVendor

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 25, 2026 - 18:17 vuln.today

CVE Published

Aug 25, 2026 - 16:23 oss-security

CRITICAL

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

Articles & Coverage 1

News Critical RCE in GitLab via OpenRGB Server - CVE-2026-59683 Aug 25, 2026

AnalysisAI

Remote code execution with root privileges is achievable against OpenRGB server instances by sending unauthenticated TCP messages to port 6742, exploiting the UPDATEMODE and SAVE_PROFILE message handlers in combination. The OpenRGB server daemon, deployed as a systemd service in openSUSE Tumbleweed with full root privileges and listening on all interfaces (0.0.0.0:6742), enforces zero authentication or authorization on its custom binary protocol, allowing any network-reachable attacker to drive the exploit chain to full system compromise. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	The OpenRGB server daemon must be running in --server mode and reachable on TCP port 6742. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Real-world risk is critical and the exploitation bar is extremely low. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Vendor-released patch: 1.0rc3-hotfix. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify and inventory all OpenRGB server deployments; disable the service immediately if not mission-critical using systemctl disable openrgb, or restrict TCP port 6742 access to authorized hosts only using host firewall rules if the service is essential. …

Threat intelligence, references, and detailed analysis are available after sign-in.