VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 9, 2025· Updated Jan 20, 2026

LizardBytes Sunshine for Windows contains a DLL search-order hijacking vulnerability

CVE-2025-10198

Description

Sunshine for Windows, version v2025.122.141614, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-writeable PATH directories.

Affected products

2
  • Lizardbyte/Sunshinellm-fuzzy
    Range: = v2025.122.141614
  • LizardByte/Sunshine for Windowsv5
    Range: v2025.122.141614

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.