CVE-2026-104989
Pre-authentication remote code execution in Chaos V-Ray Swarm
Uncontrolled search path element in package upload feature in Chaos Software V-Ray versions through 2.0.19 allows remote unauthenticated attackers to execute arbitrary code via redirecting access to libraries
CVSS 4.0 · 9.3 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products