CyberRota Analysis
AI-GeneratedStreambert versions prior to 2.6.0 are vulnerable due to an insecure IPC handler that allows a compromised renderer to pass an unvalidated file path to the operating system, potentially executing local files with the application's privileges. This vulnerability can lead to arbitrary code execution, enabling attackers to escape the renderer sandbox. Organizations using Streambert should prioritize upgrading to version 2.6.0 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-path-at-time IPC handler in src/ipc/player.js accepts a renderer-controlled filePath without validating its type or location. If the mpv or VLC launch attempts are skipped or fail, the handler passes filePath to Electron's shell.openPath. A compromised renderer can provide the path of a local executable, script, shortcut, or other file with an executing default handler, causing the operating system to launch it with the privileges of the StreamBERT process and enabling escape from the renderer sandbox. This issue is fixed in version 2.6.0.