CVE-2026-59682

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-59682
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-59682.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-59682
Downstream
Related
Published
2026-08-26T09:13:22Z
Modified
2026-10-28T10:55:11Z
Severity
  • 8.8 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Arbitrary file overwrite and deletion local and remote in OpenRGB
Details

Arbitrary file overwrite via SAVE_PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3.

Database specific 
{
    "cna_assigner": "suse",
    "cwe_ids": [
        "CWE-73"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59682.json"
}
References

Affected packages

Git / gitlab.com/calcprogrammer1/openrgb

Affected ranges

Type
GIT
Repo
https://gitlab.com/calcprogrammer1/openrgb
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d2dd9dcc7369e78f47d01ace19af3750cd89ae66
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "d2dd9dcc7369e78f47d01ace19af3750cd89ae66"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "ChangesAt"
        },
        {
            "range": [
                {
                    "fixed": "d2dd9dcc7369e78f47d01ace19af3750cd89ae66"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

release_0.*
release_0.1
release_0.2
release_0.3
release_0.4
release_0.5
release_0.6
release_0.7
release_0.8
release_0.9
release_candidate_1.*
release_candidate_1.0rc1
release_candidate_1.0rc2
release_candidate_1.0rc2wr0
release_candidate_1.0rc3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-59682.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "282757793619303172934404325901327203506",
            "length": 7971
        },
        "id": "CVE-2026-59682-10350a2b",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target": {
            "file": "NetworkServer.cpp",
            "function": "NetworkServer::ListenThreadFunction"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "322349998864898802794622144854412220568",
                "208698755085950346046112989215359970760",
                "119806124576313253900990977264906326499",
                "284768564687001632512782562956579511671",
                "253724389614060727870871211502056874577",
                "64816052312727547786264032054030361871",
                "19385456728506249526885729010249828762"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-59682-10b8951e",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target": {
            "file": "StringUtils.cpp"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "323107566027453662779346590227282392295",
                "117406684580505668136167856757136736203",
                "25083145235401289199960849757136280250",
                "232298029481204207568784993017342293038",
                "148832930559292644578287616493885021089",
                "196394819639494740468563460032065282712",
                "303815322209423144492940919573295984472",
                "278476806288386688576281349613644007824",
                "60582079477449156117553867818028096804",
                "190947480793103281972024509200300418345",
                "57108089609289319770918800717505926750",
                "263603095521596482359072863712747898616"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-59682-52de91e0",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target": {
            "file": "ProfileManager.cpp"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "315673586532126711077906701193197624619",
                "120832829731941778623600501317577548993",
                "299656908887905861193477008307806974029"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-59682-61f9f340",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target": {
            "file": "StringUtils.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "286853739122543647694695458753869014658",
            "length": 1074
        },
        "id": "CVE-2026-59682-79e4499a",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target": {
            "file": "ProfileManager.cpp",
            "function": "ProfileManager::SaveProfile"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "249749204173706615843152028605700968386",
            "length": 240
        },
        "id": "CVE-2026-59682-821b107f",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target": {
            "file": "ProfileManager.cpp",
            "function": "ProfileManager::DeleteProfile"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "161169517863380733557194438788091683508",
                "322316876743499429116701272327275982168",
                "215785893999238604226270163766880771181",
                "230458920664536821973106771008226830015"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-59682-84a3dccd",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target": {
            "file": "NetworkClient.cpp"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "95437639852737716356002784434995179729",
            "length": 1092
        },
        "id": "CVE-2026-59682-afde58c1",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target": {
            "file": "ProfileManager.cpp",
            "function": "ProfileManager::LoadProfileToList"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "275375697301144669591548466861494267373",
                "93096688385561160866853160425515300003",
                "104222903630217327410044352801766909658",
                "139299014324504129761409869262926751735"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-59682-b480deb6",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target": {
            "file": "NetworkServer.cpp"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "280617671278284019699804019264086409569",
            "length": 2286
        },
        "id": "CVE-2026-59682-fcb245ae",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target": {
            "file": "NetworkClient.cpp",
            "function": "NetworkClient::ListenThreadFunction"
        }
    }
]
vanir_signatures_modified 
"2026-10-28T10:55:11Z"