Read the docs
TI-2025-35682 Aliases CVE-2025-57799

StreamVault can perform remote command execution

Priority MEDIUM 42CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

StreamVault is a multi-platform video parsing and downloading tool. Prior to version 250822, after logging into the StreamVault-system, an attacker can modify certain system parameters, construct malicious commands, execute command injection attacks against the system, and ultimately gain server privileges. Users of all versions of the StreamVault system to date who have not modified their background passwords or use weak passwords are at risk of having their systems taken over via remote command execution. This issue has been patched in version 250822.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01225 68th percentileScored 2026-11-07
Fix Fixed StreamVault (lemon8866): 250822

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
lemon8866StreamVaultbefore 250822250822Patch availableCNA
  • StreamVault Vendorlemon8866 Affected before 250822 Fixed in 250822 Patch available CNA

Remediation

  • Fix · CNA StreamVault (lemon8866) Fixed in 250822

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-57799

References

Other 2

  • TI-2025-40707 StreamVault is Vulnerable to Authenticated Remote Code Execution (RCE) via ytdlpargs Configuration Injection CVSS 3.1CRITICAL 10.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences