CVE-2026-48055: Streambert: Arbitrary File Write (Zip Slip) via Subtitle Extraction
Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versions 2.4.0 and prior, a high-severity Zip Slip vulnerability was identified in Streambert's subtitle extraction logic. The application does not sanitize archive entry filenames during extraction, allowing a malicious archive to perform path traversal and write arbitrary files to the host filesystem. The subtitle extraction process downloads a ZIP archive and extracts its entries. The destination file path is constructed by concatenating the raw archive entry name (extracted.name) directly to the temporary directory path. If a malicious ZIP archive containing directory traversal sequences is processed, it escapes the temporary directory boundaries. The application then writes the extracted payload anywhere on the host filesystem subject to the application's current write permissions. This issue has been fixed in version 2.5.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Streambertto a version that resolves this vulnerability.Fixed in 2.5.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-48055?
The severity of CVE-2026-48055 is rated as critical with a score of 10.
How do I fix CVE-2026-48055?
To fix CVE-2026-48055, upgrade to Streambert version 2.5.0 or later, which addresses the Zip Slip vulnerability.
What type of vulnerability is CVE-2026-48055?
CVE-2026-48055 is classified as a Zip Slip vulnerability, allowing arbitrary file writes during subtitle extraction.
Which versions of Streambert are affected by CVE-2026-48055?
Streambert versions 2.4.0 and prior are affected by CVE-2026-48055.
What are the potential impacts of CVE-2026-48055?
The potential impacts of CVE-2026-48055 include unauthorized file writes which can lead to execution of malicious code on the affected system.