Remotion: arbitrary file write vulnerability

Re-Analyse & Statuswechsel

Chronologie der NVD-Audit-Events für diese CVE — Reanalyses, CVSS-Updates, CPE-Diffs.

1. Initial Analysis2026-06-17 16:10 UTC· nvd@nist.gov
   • CPE Configuration: OR *cpe:2.3:a:remotion:remotion:4.0.409:*:*:*:*:*:*:*
   • Reference Type: MITRE: https://github.com/EaEa0001/security-advisories/blob/main/CVE-2026-30121.md Types: Third Party Advisory
2. CVE Modified2026-06-16 15:16 UTC· 134c704f-9b21-4f2e-91b3-4a467353bcc0
   • CVSS V3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
   • CWE: CWE-123
3. New CVE Received2026-06-15 20:16 UTC· cve@mitre.org
   • Description: remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability.
   • Reference: https://github.com/EaEa0001/security-advisories/blob/main/CVE-2026-30121.md

Betroffene Produkte

Aus der Hersteller-/CERT-Meldung extrahierte Produkte und Versionsbereiche. Ein Version-Range wie „<4.14.6“ impliziert die Update-Empfehlung „auf 4.14.6 oder höher aktualisieren“.

• npm

  remotion

Quellen & Referenzen

• https://nvd.nist.gov/vuln/detail/CVE-2026-30121
  advisory
• https://github.com/remotion-dev/remotion/pull/6378
  web
• https://github.com/EaEa0001/security-advisories/blob/main/CVE-2026-30121.md
  web
• https://github.com/remotion-dev/remotion
  package
• https://github.com/remotion-dev/remotion/releases/tag/v4.0.410
  web

Verknüpfte Empfehlungen

• sans-atrisk-mail2026-06-18 00:00 UTC
  @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 24