Iina vulnerabilities
We track 1 vulnerability in Iina products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 21, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Iina vulnerabilities
- 8.8 High severity
iina: Improper Neutralization of Argument Delimiters in a Command
IINA before 1.4.3 contains a user-assisted command execution vulnerability that allows remote attackers to execute arbitrary commands by supplying malicious mpv_-prefixed query parameters through the iina://open custom URL scheme handler. Attackers can deliver