PT-2026-39422

CVE-2026-45184

·

Published

2026-05-09

·

Updated

2026-09-30

Description by

CVSS 3.1
6.5
Medium
MetricsAV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions Kdenlive versions prior to 26.04.1
Description An issue exists where the software allows the injection of dangerous proxy parameters when a project file controlled by an attacker is used.
Recommendations Update to version 26.04.1.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Related identifiers
CVE-2026-45184
USN-8856-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com