CVE-2026-108830

MEDIUM 4.2

meetecho janus-gateway VideoRoom janus_videoroom.c race condition

CVSS Score

4.2

EPSS Score

0.0%

EPSS Percentile

0th

A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugins/janus_videoroom.c of the component VideoRoom. This manipulation causes race condition. Remote exploitation of the attack is possible. The attack's complexity is rated as high. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks. Patch name: 27c0d1af888153e818675b56a4e6267f62d57097. Applying a patch is the recommended action to fix this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

CWE	CWE-362
Vendor	meetecho
Product	janus-gateway
Published	Oct 12, 2026

Stay Ahead of the Next One

Get instant alerts for meetecho janus-gateway

Be the first to know when new medium vulnerabilities affecting meetecho janus-gateway are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

meetecho / janus-gateway

1.4.0 1.4.1 1.4.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/416606 vuldb.com: https://vuldb.com/vuln/416606/cti vuldb.com: https://vuldb.com/cve/CVE-2026-108830 vuldb.com: https://vuldb.com/submit/931618 github.com: https://github.com/meetecho/janus-gateway/blob/master/src/plugins/janus_videoroom.c github.com: https://github.com/meetecho/janus-gateway/pull/3678 github.com: https://github.com/meetecho/janus-gateway/commit/27c0d1af888153e818675b56a4e6267f62d57097 github.com: https://github.com/meetecho/janus-gateway/

Credits

🔍 qyf20051010 (VulDB User) VulDB CNA Team