Mmastodon TechnologyCybersecurity first seen 10 h ago, last 10 h ago, peak #12

High-severity vulnerability found in Aegisub subtitle editor

Original: 🟠 CVE-2026-92705 - High (7.8) Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automat

A high-severity vulnerability, CVE-2026-92705 with a CVSS score of 7.8, has been disclosed in Aegisub, a cross-platform advanced subtitle editor. All versions from 3.2.0 to 3.4.2 are affected: the software automatically loads Automation scripts referenced by ASS subtitle project metadata without asking users whether the scripts are trusted, potentially allowing malicious code execution when opening a crafted subtitle file. Security watchers are urging users to be cautious with untrusted subtitle files.

Why now: A newly disclosed high-severity flaw allows malicious scripts to run simply by opening a subtitle file, a risk for anyone handling fan-subtitled content.

AegisubCVE-2026-92705

Open on mastodon →

Evidence

• 🟠 CVE-2026-92705 - High (7.8) Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by `Automation Scripts` metadata in `ASS` subtitle projects without asking whether the user trusts the scripts or… · thehackerwire

API: https://socialmediatrends-api.osmike.com/v1/trends/1656420