OpenRGB: Multiple Vulnerabilities — GLSA 202608-30

{
  "id": "3850ddeca248b003d9926479a6c5566747936c69cf6b5cb5f583737985375a68",
  "url": "https://security.gentoo.org/glsa/202608-30",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "OpenRGB: Multiple Vulnerabilities — GLSA 202608-30",
    "summary": "Multiple vulnerabilities in OpenRGB could allow root remote command execution. Users should upgrade to the fixed version and avoid exposing OpenRGB to the network.",
    "evidence": "Multiple vulnerabilities have been found in OpenRGB, allowing root remote command execution.",
    "products": [
      {
        "name": {
          "value": "app-misc/openrgb",
          "evidence": "Package app-misc/openrgb on all architectures"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": ">= 1.0_rc3_p1",
            "evidence": "Unaffected versions >= 1.0_rc3_p1"
          }
        ],
        "affected_versions": [
          {
            "value": "< 1.0_rc3_p1",
            "evidence": "Affected versions < 1.0_rc3_p1"
          }
        ]
      }
    ],
    "severity": "high",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-18794",
        "evidence": "References CVE-2026-18794 CVE-2026-59682 CVE-2026-59683"
      },
      {
        "value": "CVE-2026-59682",
        "evidence": "References CVE-2026-18794 CVE-2026-59682 CVE-2026-59683"
      },
      {
        "value": "CVE-2026-59683",
        "evidence": "References CVE-2026-18794 CVE-2026-59682 CVE-2026-59683"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "Severity high"
  },
  "source_id": "official-gentoo-glsa",
  "document_id": 23647,
  "published_at": "2026-08-27T00:00:00+00:00"
}