TI-2020-19194 CVE-2020-37059 · GHSA-r477-j3qm-pjx3Popcorn Time 6.2 - 'Update service' Unquoted Service PathPriority HIGH 72Popcorn Time 6.2.1.14 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges.CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00159 · Published 2026-01-30 · No fix listed CWE-428