CVE-2026-48046

UNKNOWN 0.0

Streambert Vulnerable to Remote Code Execution (RCE) via Unvalidated Auto-Updater IPC Handler

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 contain an unvalidated auto-updater URL vulnerability that allows a compromised renderer process to make the main process download and execute an arbitrary binary, resulting in remote code execution. Version 2.5.0 contains a patch.

CWE	CWE-494
Vendor	truelockmc
Product	streambert
Published	Aug 11, 2026

Stay Ahead of the Next One

Get instant alerts for truelockmc streambert

Be the first to know when new unknown vulnerabilities affecting truelockmc streambert are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

truelockmc / streambert

< 2.5.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/truelockmc/streambert/security/advisories/GHSA-vj74-r9xm-37mj github.com: https://github.com/truelockmc/streambert/releases/tag/2.5.0