CVE-2026-36365 | THREATINT

Description

An issue in Lymphatus caesium-image-compressor All versions up to and including commit 02da2c6 allows a local attacker to execute arbitrary code via the shutdownMachine and putMachineToSleep functions in PostCompressionActions.cpp

PUBLISHED Reserved 2026-04-06 | Published 2026-05-04 | Updated 2026-05-05 | Assigner mitre

References

github.com/Lymphatus/caesium-image-compressor

github.com/...blob/main/src/utils/PostCompressionActions.cpp

github.com/Lymphatus/caesium-image-compressor/pull/376

github.com/...esearch/blob/main/advisories/CVE-2026-36365.md

cve.org (CVE-2026-36365)

nvd.nist.gov (CVE-2026-36365)

Download JSON