OpenDeck vulnerabilities

1 known vulnerability in OpenDeck from Nekename. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  OpenDeck: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-28427Mar 4, 2026Nekename

  OpenDeck is Linux software for your Elgato Stream Deck. Prior to 2.8.1, the service listening on port 57118 serves static files for installed plugins but does not properly sanitize path components. By including ../ sequences in the request path, an attacker ca