PatchSiren cyber security CVE debrief
CVE-2026-66050 nitroshare CVE debrief
CVE-2026-66050 is a path traversal vulnerability in NitroShare Desktop through 0.3.4. The vulnerability allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences in the JSON item header name field. Attackers can exploit the lack of path validation to write files outside the transfer root directory to arbitrary locations the current user has write access, including the Windows Startup folder, enabling persistent code execution on the next user login.
- Vendor
- nitroshare
- Product
- nitroshare-desktop
- CVSS
- HIGH 8.7
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-07-27
- Original CVE updated
- 2026-07-27
- Advisory published
- 2026-07-27
- Advisory updated
- 2026-07-27
Who should care
Users of NitroShare Desktop through 0.3.4, especially those in environments where the software is used for file transfers across a network, should be aware of this vulnerability. This includes organizations and individuals who rely on NitroShare for convenient file sharing.
Technical summary
The path traversal vulnerability in NitroShare Desktop through 0.3.4 allows unauthenticated attackers on the same network to write arbitrary files. This is achieved by sending a crafted filename containing directory traversal sequences in the JSON item header name field. The lack of path validation enables attackers to write files outside the transfer root directory to arbitrary locations where the current user has write access. Notably, attackers can write files to the Windows Startup folder, which allows for persistent code execution on the next user login. The vulnerability has a CVSS score of 8.7 and is classified as HIGH severity.
Defensive priority
High
Recommended defensive actions
- Immediately update NitroShare Desktop to a version that fixes this vulnerability, if available.
- Implement network segmentation to limit the spread of the attack.
- Monitor file system changes for suspicious activity.
- Enforce strict access controls and authentication for file transfer services.
- Regularly review and update software dependencies and libraries.
Evidence notes
The CVE record was published on 2026-07-27T15:17:10.487Z and was last modified on 2026-07-27T17:16:41.527Z. The NVD entry is currently Received. References include GitHub and Vulncheck advisories. Affected product deployments should be confirmed in managed environments, and an owner should be assigned for follow-up. Official advisories or CVE records should be reviewed to validate affected scope, severity, and vendor guidance. Vendor-supported updates or mitigations should be planned through normal change control where exposure is confirmed. Compensating controls for exposed systems should be reviewed while remediation is scheduled and verified. Relevant monitoring, detection, and logs should be checked for exposed assets that need extra review.
Official resources
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-27T15:17:10.487Z and has not been modified since then. The NVD entry is currently Received.