Is CVE-2026-48056 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-48056?

CVE-2026-48056 has a CVSS v3 severity of CRITICAL (10).

Back

CVE-2026-48056

Description

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s privileges. Version 2.5.0 contains a patch.