TI-2026-34707 CVE-2026-47114 · GHSA-55r7-xx3w-x2wf
IINA < 1.4.3 Command Execution via iina://open URL Scheme
Priority HIGH 72
IINA before 1.4.3 contains a user-assisted command execution vulnerability that allows remote attackers to execute arbitrary commands by supplying malicious mpv_-prefixed query parameters through the iina://open custom U…