Live › vulnerability › CVE-2026-107050
RetroArch v1.22.2 has a flaw that lets an attacker make another user's session load attacker-supplied code under that user's ID. The result is arbitrary code execution as that user.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 17:26 UTC. All times on this page are UTC.
The sources only name RetroArch v1.22.2 and say that another user can be forced to load attacker code under their own user ID on a shared machine. They do not say which platforms, configurations or sharing setups are needed. unknown
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to arbitrary code execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-107050")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.