CVE-2026-30121: Remotion vulnerability

Remotion · Remotion

remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability.

9.1 CVSS 3.1 Critical EPSS 0.48% · top 61.2% CWE-123 · CWE-123

9.1CVSS 3.1 base score

0.48%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

1References

17 Jun 2026Last modified by NVD

Description

remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Remotion Remotion

References

Link	Tags
https://github.com/EaEa0001/security-advisories/blob/main/CVE-2026-30121.md	Third Party Advisory

Track CVE-2026-30121 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-30120Remotion code injection vulnerabilityremotion-dev remotion v4.0.409 was discovered to contain a remote code execution (RCE) vulnerability.EPSS 0.87%15 Jun 2026 8.2CVE-2025-22225VMware ESXi VMX arbitrary write enables sandbox escapeVMware ESXi contains an arbitrary write vulnerability in which a malicious actor with privileges within the VMX process can trigger an arbitrary kern…KEVEPSS 1.00%analysed4 Mar 2025

Source: NIST National Vulnerability Database (record CVE-2026-30121), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.