Logitech vulnerabilities
We track 5 vulnerabilities in Logitech products across 6 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2026.
Latest Logitech vulnerabilities
- 8.5 High severity
Logi Options+: Improper Privilege Management
A local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows allows a low-privileged local user to execute arbitrary code as SYSTEM.
- 7.8 High severity
Logitech Options Plus: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.
- 7.3 High severity
Streamlabs Desktop: Improper Access Control
StreamLabs Desktop Application 1.9.0 is vulnerable to Incorrect Access Control via obs64.exe. An attacker can execute arbitrary code via a crafted .exe file.
- 8.8 High severity
Options: Cross-Site Request Forgery
An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.
- 7.0 High severity
Sync: Time-of-check Time-of-use (TOCTOU) Race Condition
There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Successful exploitation of these vulnerabilities may escalate the permission to the system user.