CVE-2022-41158: Eyoom Builder

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

Remote code execution vulnerability can be achieved by using cookie values as paths to a file by this builder program. A remote attacker could exploit the vulnerability to execute or inject malicious code.

Affected products

• Eyoom Eyoom Builder: up to and including 4.5.3

Published 2022-11-25. Last modified 2026-06-17.