VYPR
Unrated severityNVD Advisory· Published Jul 28, 2026· Updated Jul 29, 2026

Bridge | Untrusted Search Path (CWE-426)

CVE-2026-48391

Description

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Affected products

1

Patches

Vulnerability mechanics

References

1

News mentions

1