CVE-2026-59682: Arbitrary file overwrite and deletion local and remote in OpenRGB
Published Aug 25, 2026
·Updated
Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3.
Affected Software
1 affected component
OpenRGB OpenRGB<=1.0rc3
Event History
Aug 26, 2026
CVE Published
via MITRE·09:13 AM
Data Sourced
via MITRE·09:13 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which OpenRGB versions are affected?
OpenRGB is affected through version 1.0rc3. The provided data does not identify the first fixed release.
2
Can an unauthenticated attacker exploit this over the network?
The vector is network-based, requires low attack complexity, and requires neither privileges nor user interaction. The available data identifies SAVE_PROFILE messages as the affected mechanism.
3
What impact can successful exploitation have?
Successful exploitation can allow arbitrary file overwrite and deletion. The severity vector indicates high integrity and availability impact, with no confidentiality impact specified.