CVE-2026-48056
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
Streambert before 2.5.0 improperly validates executable paths supplied to the run-download IPC handler, allowing a compromised renderer to execute arbitrary local binaries with the app's privileges.
Risk Assessment
An attacker can execute malicious programs on the victim's machine, potentially leading to data theft or system takeover.
Recommendation
Upgrade Streambert to version 2.5.0 or later. Limit trust in renderer processes.
Original NVD description (English source)
Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s privileges. Version 2.5.0 contains a patch.