CVE-2022-46640: Nanoleaf Desktop

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Nanoleaf Desktop App before v1.3.1 was discovered to contain a command injection vulnerability which is exploited via a crafted HTTP request.

Affected products

• Nanoleaf Nanoleaf Desktop: before 1.3.1 (fixed in 1.3.1)

Published 2023-04-18. Last modified 2026-07-09.