← Database

CVE-2026-48056

CRITICAL CVSS: 10.0 Published: 2026-08-11 Modified: 2026-08-11

Description

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the  run-download  IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s privileges. Version 2.5.0 contains a patch.

Affected Platforms

Unknown

Weakness Type

CWE-20, CWE-749

References