Skip to content
OpenAdvisories
Medium · 6.7 CVE-2026-3091 EUVD-2026-7405GHSA-fj46-cfm8-7pc4

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary…

Published Feb 24, 2026 · Updated Jun 2, 2026 · Assigned by synology

Description

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer.

Affected products

VendorProductAffectedFixed
Synology Synology Presto Client < 2.1.3-0672 2.1.3-0672

References