Live › vulnerability › CVE-2026-92202
Go to dashboardKeyShot loads a library from an insecure location while parsing BIP files. An attacker who gets a user to open a malicious file or visit a malicious page can run code in the KeyShot process.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that use Luxion KeyShot to open BIP files, especially from outside sources. Sources do not list affected versions. Systems without KeyShot installed are not affected.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of BIP files. The issue results from loading a library from an unsecured location. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29268.
This page as .md · .json · in your agent: get_signal("CVE-2026-92202")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.