EUVD-2026-62196Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
AC:H reflects mandatory renderer compromise prerequisite; UI:R because user must actively load attacker-controlled streaming content; S:C retained for OS-level handler invocation crossing Electron sandbox.
Primary rating from Vendor (github).
CVSS VectorVendor: github
Lifecycle Timeline
4DescriptionCVE.org
Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-external IPC handler in src/ipc/downloads.js passes a renderer-supplied url directly to Electron's shell.openExternal without validating its protocol. A compromised renderer can submit file: URIs or operating-system-specific custom schemes, causing the host to open local files, access remote resources through registered handlers, or launch scripts and applications supported by those handlers. This issue is fixed in version 2.6.0.
AnalysisAI
Unvalidated protocol forwarding in Streambert's open-external IPC handler (src/ipc/downloads.js) allows a compromised renderer to pass arbitrary URIs - including file: and OS-registered custom schemes - directly to shell.openExternal, enabling local file access, invocation of system protocol handlers, and potential script execution on the host OS. All Streambert versions prior to 2.6.0 are affected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a compromised Streambert renderer process - achievable if the attacker controls a streaming content source, video metadata endpoint, or any URL loaded into the app's embedded Chromium view without strict Content Security Policy enforcement. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-assigned CVSS 8.3 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) reflects the scope change from renderer to OS and the broad impact across confidentiality, integrity, and availability, but the AC:L and PR:N/UI:N metrics overstate ease of exploitation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Streambert to version 2.6.0 or later. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify and prioritize all systems using Streambert versions prior to 2.6.0, categorizing by production criticality. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-20 – Improper Input Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today