CVE-2026-59683
Received Received - Intake

OpenRGB Network Protocol Path Traversal Vulnerability

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: SUSE

Description
The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths (extension of CVE-2026-59682). This allows either a full system compromise from local or remote (if the daemon is running as root) or a full account takeover (if the daemon is running in user context).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-59683
EUVD
EUVD-2026-66359

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-73 The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the OpenRGB network protocol allows attackers to write malicious strings to arbitrary file paths. If the OpenRGB daemon runs as root, it can lead to full system compromise. If running in user context, it can result in full account takeover.

Impact Analysis

An attacker could exploit this to overwrite critical system files, install malware, or gain control of your account. Remote exploitation is possible if the daemon is running as root or exposed to the network.

Compliance Impact

This vulnerability could lead to unauthorized data access or system compromise, violating GDPR's integrity and confidentiality requirements or HIPAA's security rules for protected health information.

Mitigation Strategies

Disable the OpenRGB network protocol if not needed. Ensure the OpenRGB daemon is not running as root. Update OpenRGB to the latest version if a patch is available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59683. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart