CVE-2026-41476

Deskflow is a keyboard and mouse sharing app. Prior to 1.26.0.138, a remote memory-safety vulnerability in Deskflow's clipboard deserialization allows a connected peer to trigger an out-of-bounds read by sending a malformed clipboard update. The issue is in the implementation of src/lib/deskflow/IClipboard.cpp. This is reachable because ClipboardChunk::assemble() in src/lib/deskflow/ClipboardChunk.cpp validates only the outer clipboard transfer size. It does not validate the internal structure of the serialized clipboard blob, so malformed inner lengths reach IClipboard::unmarshall() unchanged. This vulnerability is fixed in 1.26.0.138.

• CWE-120

• https://github.com/deskflow/deskflow/security/advisories/GHSA-3jp5-g964-cgmhExploit, Vendor Advisory
• https://github.com/deskflow/deskflow/security/advisories/GHSA-3jp5-g964-cgmhExploit, Vendor Advisory

Published

Apr 24, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4147An authenticated user with the read role may read limited am…4.3
• CVE-2026-41470LIVE555 before 2026.04.22 contains an authorization bypass v…8.2
• CVE-2026-41471The Easy PayPal Events & Tickets plugin for WordPress before…8.2
• CVE-2026-41472CyberPanel versions prior to 2.4.5 contain a stored cross-si…6.1
• CVE-2026-41473CyberPanel versions prior to 2.4.5 contain an authentication…9.1
• CVE-2026-41475BACnet Stack is a BACnet open source protocol stack C librar…9.1
• CVE-2026-41477Deskflow is a keyboard and mouse sharing app. In 1.20.0, 1.…7.8
• CVE-2026-41478Saltcorn is an extensible, open source, no-code database app…9.9
• CVE-2026-41479Authlib is a Python library which builds OAuth and OpenID Co…5.4
• CVE-2026-4148A use-after-free vulnerability can be triggered in sharded c…8.8
• CVE-2026-41481LangChain is a framework for building agents and LLM-powered…6.5
• CVE-2026-41482Frappe is a full-stack web application framework. Prior to 1…7.1