CVE-2026-59682

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-59682
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-59682.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-59682
Downstream
Related
Published
2026-08-26T09:13:22Z
Modified
2026-10-08T07:14:19Z
Severity
  • 8.8 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Arbitrary file overwrite and deletion local and remote in OpenRGB
Details

Arbitrary file overwrite via SAVE_PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3.

Database specific 
{
    "cna_assigner":  "suse",
    "cwe_ids":  [
        "CWE-73"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59682.json"
}
References

Affected packages

Git / gitlab.com/calcprogrammer1/openrgb

Affected ranges

Type
GIT
Repo
https://gitlab.com/calcprogrammer1/openrgb
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d2dd9dcc7369e78f47d01ace19af3750cd89ae66
Database specific
Show details 
{
    "source":  "REFERENCES"
}

Affected versions

release_0.*
release_0.1
release_0.2
release_0.3
release_0.4
release_0.5
release_0.6
release_0.7
release_0.8
release_0.9
release_candidate_1.*
release_candidate_1.0rc1
release_candidate_1.0rc2
release_candidate_1.0rc2wr0
release_candidate_1.0rc3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-59682.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "282757793619303172934404325901327203506",
            "length":  7971
        },
        "id":  "CVE-2026-59682-10350a2b",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target":  {
            "file":  "NetworkServer.cpp",
            "function":  "NetworkServer::ListenThreadFunction"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "322349998864898802794622144854412220568",
                "208698755085950346046112989215359970760",
                "119806124576313253900990977264906326499",
                "284768564687001632512782562956579511671",
                "253724389614060727870871211502056874577",
                "64816052312727547786264032054030361871",
                "19385456728506249526885729010249828762"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59682-10b8951e",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target":  {
            "file":  "StringUtils.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "323107566027453662779346590227282392295",
                "117406684580505668136167856757136736203",
                "25083145235401289199960849757136280250",
                "232298029481204207568784993017342293038",
                "148832930559292644578287616493885021089",
                "196394819639494740468563460032065282712",
                "303815322209423144492940919573295984472",
                "278476806288386688576281349613644007824",
                "60582079477449156117553867818028096804",
                "190947480793103281972024509200300418345",
                "57108089609289319770918800717505926750",
                "263603095521596482359072863712747898616"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59682-52de91e0",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target":  {
            "file":  "ProfileManager.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "315673586532126711077906701193197624619",
                "120832829731941778623600501317577548993",
                "299656908887905861193477008307806974029"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59682-61f9f340",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target":  {
            "file":  "StringUtils.h"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "286853739122543647694695458753869014658",
            "length":  1074
        },
        "id":  "CVE-2026-59682-79e4499a",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target":  {
            "file":  "ProfileManager.cpp",
            "function":  "ProfileManager::SaveProfile"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "249749204173706615843152028605700968386",
            "length":  240
        },
        "id":  "CVE-2026-59682-821b107f",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target":  {
            "file":  "ProfileManager.cpp",
            "function":  "ProfileManager::DeleteProfile"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "161169517863380733557194438788091683508",
                "322316876743499429116701272327275982168",
                "215785893999238604226270163766880771181",
                "230458920664536821973106771008226830015"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59682-84a3dccd",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target":  {
            "file":  "NetworkClient.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "95437639852737716356002784434995179729",
            "length":  1092
        },
        "id":  "CVE-2026-59682-afde58c1",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target":  {
            "file":  "ProfileManager.cpp",
            "function":  "ProfileManager::LoadProfileToList"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "275375697301144669591548466861494267373",
                "93096688385561160866853160425515300003",
                "104222903630217327410044352801766909658",
                "139299014324504129761409869262926751735"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59682-b480deb6",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target":  {
            "file":  "NetworkServer.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "280617671278284019699804019264086409569",
            "length":  2286
        },
        "id":  "CVE-2026-59682-fcb245ae",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://gitlab.com/calcprogrammer1/openrgb@d2dd9dcc7369e78f47d01ace19af3750cd89ae66",
        "target":  {
            "file":  "NetworkClient.cpp",
            "function":  "NetworkClient::ListenThreadFunction"
        }
    }
]
vanir_signatures_modified 
"2026-10-08T07:14:19Z"