CVE-2026-59682: Arbitrary file overwrite and deletion local and remote in OpenRGB

Q: Which OpenRGB versions are affected?

OpenRGB is affected through version 1.0rc3. The provided data does not identify the first fixed release.

Q: Can an unauthenticated attacker exploit this over the network?

The vector is network-based, requires low attack complexity, and requires neither privileges nor user interaction. The available data identifies SAVE_PROFILE messages as the affected mechanism.

Q: What impact can successful exploitation have?

Successful exploitation can allow arbitrary file overwrite and deletion. The severity vector indicates high integrity and availability impact, with no confidentiality impact specified.

Published Aug 25, 2026

Updated

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3.

Affected Software

1 affected component

OpenRGB OpenRGB<=1.0rc3

Event History

Aug 26, 2026

CVE Published

via MITRE·09:13 AM

Data Sourced

via MITRE·09:13 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which OpenRGB versions are affected?

OpenRGB is affected through version 1.0rc3. The provided data does not identify the first fixed release.

Can an unauthenticated attacker exploit this over the network?

The vector is network-based, requires low attack complexity, and requires neither privileges nor user interaction. The available data identifies SAVE_PROFILE messages as the affected mechanism.

What impact can successful exploitation have?

Successful exploitation can allow arbitrary file overwrite and deletion. The severity vector indicates high integrity and availability impact, with no confidentiality impact specified.

CVE-2026-59682: Arbitrary file overwrite and deletion local and remote in OpenRGB

Affected Software

Event History

Frequently Asked Questions

Which OpenRGB versions are affected?

Can an unauthenticated attacker exploit this over the network?

What impact can successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

Which OpenRGB versions are affected?

Can an unauthenticated attacker exploit this over the network?

What impact can successful exploitation have?