CVE-2026-104989
Pre-authentication remote code execution in Chaos V-Ray Swarm
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Uncontrolled search path element in package upload feature in Chaos Software V-Ray versions through 2.0.19 allows remote unauthenticated attackers to execute arbitrary code via redirecting access to libraries
| CWE | CWE-427 |
| Vendor | chaos software |
| Product | v-ray swarm |
| Published | Nov 9, 2026 |
| Last Updated | Nov 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for chaos software v-ray swarm
Be the first to know when new unknown vulnerabilities affecting chaos software v-ray swarm are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Chaos Software / V-Ray Swarm
0 ≤ 2.0.19