High · 7.8 CVE-2025-10199 EUVD-2025-27421GHSA-7fx4-846p-mpq2

A local privilege escalation vulnerability exists in LizardBytes' Sunshine for Windows

Published Sep 9, 2025 · Updated Nov 3, 2025 · Assigned by certcc

Vendor: LizardByte Product: Sunshine for Windows Platform: Windows

Description

A local privilege escalation vulnerability exists in Sunshine for Windows (version v2025.122.141614 and likely prior versions) due to an unquoted service path.

Affected products

Vendor	Product	Affected	Fixed
LizardByte	Sunshine for Windows	v2025.122.141614	—

References

https://github.com/LizardByte/Sunshine/security/advisories/GHSA-r3rw-mx4q-7vfp