CVE-2026-8920

Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura Wallpaper Service allow a local user to perform file operations by sending crafted commands containing an arbitrary file path and bypassing the service’s path restrictions . On specific models , this can also cause a single feature to become unavailable . Refer to the ' Security Update for Aura Wallpaper Service ' section on the ASUS Security Advisory for more information.

CVSS

No CVSS.

References

Link	Resource
https://www.asus.com/security-advisory/

Configurations

No configuration.

History

24 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) La restricción indebida del canal de comunicación a los puntos finales previstos y el control externo del nombre o la ruta del archivo en el servicio Aura Wallpaper permiten a un usuario local realizar operaciones de archivo enviando comandos elaborados que contienen una ruta de archivo arbitraria y eludiendo las restricciones de ruta del servicio. En modelos específicos, esto también puede causar que una única función deje de estar disponible. Consulte la sección ’Security Update for Aura Wallpaper Service’ en el Aviso de Seguridad de ASUS para más información.

Information

Published : 2026-07-15 02:22

Updated : 2026-10-24 22:10

NVD link : CVE-2026-8920

Mitre link : CVE-2026-8920

CVE.ORG link : CVE-2026-8920

JSON object : View

Products Affected

No product.

CWE

CWE-73

External Control of File Name or Path

CWE-923

Improper Restriction of Communication Channel to Intended Endpoints

{"id": "CVE-2026-8920", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8920", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-15T13:12:11.792360Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.5, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1", "affectedData": [{"vendor": "ASUS", "product": "Aura Wallpaper Service", "versions": [{"status": "affected", "version": "v2.1.8.0", "versionType": "custom", "lessThanOrEqual": "v2.1.15.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-15T02:22:57.790", "references": [{"url": "https://www.asus.com/security-advisory/", "source": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1", "description": [{"lang": "en", "value": "CWE-73"}, {"lang": "en", "value": "CWE-923"}]}], "descriptions": [{"lang": "en", "value": "Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura Wallpaper Service allow a local user to perform file operations by sending crafted commands containing an arbitrary file path and bypassing the service\u2019s path restrictions . On specific models , this can also cause a single feature to become unavailable .\nRefer to the '\u00a0Security Update for Aura Wallpaper Service\u00a0' section on the ASUS Security Advisory for more information."}, {"lang": "es", "value": "La restricci\u00f3n indebida del canal de comunicaci\u00f3n a los puntos finales previstos y el control externo del nombre o la ruta del archivo en el servicio Aura Wallpaper permiten a un usuario local realizar operaciones de archivo enviando comandos elaborados que contienen una ruta de archivo arbitraria y eludiendo las restricciones de ruta del servicio. En modelos espec\u00edficos, esto tambi\u00e9n puede causar que una \u00fanica funci\u00f3n deje de estar disponible.\nConsulte la secci\u00f3n \u2019Security Update for Aura Wallpaper Service\u2019 en el Aviso de Seguridad de ASUS para m\u00e1s informaci\u00f3n."}], "lastModified": "2026-10-24T22:10:00.210", "sourceIdentifier": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1"}