Home / Technology / Critical Vulnerability Found in GIGABYTE Software
Critical Vulnerability Found in GIGABYTE Software
1 Apr
Summary
- GIGABYTE Control Center had a critical flaw CVE-2026-4415.
- The vulnerability allowed remote attackers to execute code and escalate privileges.
- Users must update to version 25.12.10.01 or newer for security.
A critical security flaw, identified as CVE-2026-4415, has been discovered in GIGABYTE Control Center, a utility software preloaded on certain computers. This vulnerability, rated with a severity score of 9.2 out of 10, allowed unauthenticated remote attackers to write arbitrary files to any location on the operating system.
This capability could lead to arbitrary code execution or privilege escalation on affected devices. The vulnerability was found in the software's 'pairing' feature, which enables communication over a network.
Versions 25.07.21.01 and earlier are affected. GIGABYTE has released version 25.12.10.01, which includes fixes for download path management, message processing, and command encryption. Users are strongly advised to update their software immediately to secure their systems against this critical threat.
