CVE-2025-10199

A local privilege escalation vulnerability exists in Sunshine for Windows (version v2025.122.141614 and likely prior versions) due to an unquoted service path.

Score

CVSS 3.1 7.8 High

Status

Modified - cret@cert.org

Published

2025-09-09

Last modified

2025-11-03

Weaknesses

CWE-428

Affected products

• Sunshine (Lizardbyte)
• Sunshine For Windows (Lizardbyte)

References

• https://github.com/LizardByte/Sunshine/security/advisories/GHSA-r3rw-mx4q-7vfp
• https://www.kb.cert.org/vuls/id/974249