CVE-2026-110233: rovr 0 through 0.10.3

Affected technology

rovr · 0 through 0.10.3
NSPC911

Description’s affected range: through 0.10.3 on Windows

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · Active user interaction

What an attacker can do

Attackers can deliver a file named with shell metacharacters like & alongside a payload, which runs with user privileges when the file is opened through open_file. Vendor/CNA’s CVSS 4.0 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high.