CVE-2026-59683

Awaiting Analysis Awaiting Analysis - Queue

OpenRGB Network Protocol Path Traversal Vulnerability

Publication date: 2026-08-26

Last updated on: 2026-09-01

Assigner: SUSE

Description

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths (extension of CVE-2026-59682). This allows either a full system compromise from local or remote (if the daemon is running as root) or a full account takeover (if the daemon is running in user context).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-26

Last Modified

2026-09-01

Generated

2026-09-15

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-14

NVD

CVE-2026-59683

EUVD

EUVD-2026-66359

Affected Vendors & Products

Vendor	Product	Version / Range
calcprogrammer1	openrgb	1.0rc3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-73	The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

Executive Summary

This vulnerability in the OpenRGB network protocol allows attackers to write malicious strings to arbitrary file paths. If the OpenRGB daemon runs as root, it can lead to full system compromise. If running in user context, it can result in full account takeover.

Detection Guidance

Check for unauthorized file writes or modifications in system directories. Monitor network traffic for unexpected connections to OpenRGB's default port. Inspect logs for suspicious activity related to OpenRGB processes or network packets.

Impact Analysis

An attacker could exploit this to overwrite critical system files, install malware, or gain control of your account. Remote exploitation is possible if the daemon is running as root or exposed to the network.

Compliance Impact

This vulnerability could lead to unauthorized data access or system compromise, violating GDPR's integrity and confidentiality requirements or HIPAA's security rules for protected health information.

Mitigation Strategies

Disable the OpenRGB network protocol if not needed. Ensure the OpenRGB daemon is not running as root. Update OpenRGB to the latest version if a patch is available.

Hi! I’m here to help you understand CVE-2026-59683. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70