CVE-2026-59682

Awaiting Analysis Awaiting Analysis - Queue

Arbitrary File Overwrite in OpenRGB

Publication date: 2026-08-26

Last updated on: 2026-09-01

Assigner: SUSE

Description

Arbitrary file overwrite via SAVE_PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-26

Last Modified

2026-09-01

Generated

2026-09-16

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-14

NVD

CVE-2026-59682

EUVD

EUVD-2026-66380

Affected Vendors & Products

Vendor	Product	Version / Range
openrgb	openrgb	to 1.0rc3 (inc)
calcprogrammer1	openrgb	1.0rc3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-73	The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

Executive Summary

This vulnerability allows arbitrary file overwrite via the SAVE_PROFILE message in OpenRGB versions through 1.0rc3. It enables attackers to overwrite or delete files on the system, both locally and remotely, by sending specially crafted messages.

Detection Guidance

Check for unauthorized file modifications or deletions in OpenRGB profile directories. Monitor network traffic for unexpected connections to OpenRGB instances. Inspect logs for errors related to file operations or network packet processing.

Impact Analysis

An attacker could overwrite critical system files, delete important data, or install malicious files. This could lead to system compromise, data loss, or further attacks on the affected machine.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR's integrity and confidentiality requirements or HIPAA's safeguards for protected health information. Compliance may be compromised if sensitive data is exposed or altered.

Mitigation Strategies

Upgrade OpenRGB to version 1.0rc3 or later. Ensure OpenRGB is bound only to localhost (127.0.0.1) in network settings. Review and sanitize any existing profile files for malicious content.

Hi! I’m here to help you understand CVE-2026-59682. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70