CVE-2023-36658: Opswat Media Validation Agent

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally.

Affected products

• Opswat Media Validation Agent: from 2.0.0, before 2.0.7 (fixed in 2.0.7)
• Opswat Metadefender Kiosk: from 4.2, before 4.6.2 (fixed in 4.6.2)

Published 2023-09-15. Last modified 2026-06-17.