CVE-2026-92704
Description
A flaw was found in SharpEmu's debugger frontend. The local debugger interface lacks authentication and Cross-Site Request Forgery (CSRF) protections. A remote attacker could exploit this by tricking a user into visiting a malicious website that transmits unauthorized requests to the local service. This flaw could allow an attacker to execute local programs with the victim's privileges, manipulate emulated processes, or initiate unauthorized network connections.
Statement
This vulnerability is rated as Important severity because an unauthenticated loopback interface enables remote web pages to invoke local executables and manipulate process memory with the victim's privileges. Exploitation requires specific preconditions, namely running the experimental standalone debugging utility while browsing an untrusted website that issues cross-origin requests. SharpEmu is not included or supported in Red Hat Enterprise Linux or any other Red Hat product.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Understanding the Weakness (CWE)
Access Control,Other
Technical Impact: Gain Privileges or Assume Identity; Varies by Context
An attacker can access any functionality that is inadvertently accessible to the source.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
