CVE-2026-25792 - Vulnerability Analysis

Overview

Greenshot <= 1.3.312 contains an untrusted executable search path vulnerability caused by launching explorer.exe without an absolute path, letting local attackers execute arbitrary code by placing malicious executables, exploit requires local access.

Severity & Score

Impact

Local attackers can execute arbitrary code with the application's privileges, potentially compromising the system.

Mitigation

Update to the latest version once a patch is available.

References

• https://github.com/greenshot/greenshot/security/advisories/GHSA-f8v9-7fph-fr2j

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner