Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-48056 EUVD-2026-56148

Streambert Vulnerable to Arbitrary Binary Execution via Downloader IPC Handler

Published Aug 11, 2026 · Updated Aug 11, 2026 · Assigned by GitHub_M

Description

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the  run-download  IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s privileges. Version 2.5.0 contains a patch.

Affected products

VendorProductAffectedFixed
truelockmc streambert < 2.5.0 —

References