CVE-2021-26936: Replaysorcery Project Replaysorcery

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allows a local attacker to escalate privileges to root by specifying video output paths in privileged locations.

Affected products

• Replaysorcery Project Replaysorcery: from 0.4.0, up to and including 0.5.0

Published 2021-02-10. Last modified 2026-06-17.