What’s Vulnerable › Vulnerabilities

CVE-2025-10199: A local privilege escalation vulnerability exists in LizardBytes' Sunshine for Windows

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-09 · updated 2026-06-17
• Weakness: CWE-428

Description

A local privilege escalation vulnerability exists in Sunshine for Windows (version v2025.122.141614 and likely prior versions) due to an unquoted service path.

Affected products

• LizardByte Sunshine: 2025.122.141614

References

• https://github.com/LizardByte/Sunshine/security/advisories/GHSA-r3rw-mx4q-7vfp
• https://www.kb.cert.org/vuls/id/974249

Get alerted when CVE-2025-10199 or the next vulnerability affects your stack