CVE-2025-10198: LizardBytes Sunshine for Windows contains a DLL search-order hijacking vulnerability

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-09 · updated 2026-06-17
Weakness: CWE-427

Description

Sunshine for Windows, version v2025.122.141614, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-writeable PATH directories.

Affected products

LizardByte Sunshine: 2025.122.141614

References

https://github.com/LizardByte/Sunshine/commit/9db11a906167bd962e57896223d7b9718058aeb2
https://github.com/LizardByte/Sunshine/pull/3971
https://www.kb.cert.org/vuls/id/974249

Get alerted when CVE-2025-10198 or the next vulnerability affects your stack