ZDI-CAN-29340: ZDI-26-586: OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-19886.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict or block users from opening files/pages from untrusted sources (since exploitation requires user interaction: visiting a malicious page or opening a malicious file), to reduce exposure to OriginLab Origin Viewer OGM file parsing RCE attempts.
- Operational
Review and monitor for attempts to deliver malicious OriginLab Origin Viewer OGM files or lure users to malicious pages, and treat any opened files from untrusted sources as potentially malicious.