iina vulnerabilities

CVEs whose affected-version data names the iina package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-47114High· 8.8PoC

5mo ago

IINA < 1.4.3 Command Execution via iina://open URL Scheme

IINA before 1.4.3 contains a user-assisted command execution vulnerability that allows remote attackers to execute arbitrary commands by supplying malicious mpv_-prefixed query parameters through the iina://open custom URL scheme handler…

▾ Midnightiina · iinaEPSS 0.70%via CVEORG