CVE-2025-10199: Lizardbyte Sunshine

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A local privilege escalation vulnerability exists in Sunshine for Windows (version v2025.122.141614 and likely prior versions) due to an unquoted service path.

Affected products

• Lizardbyte Sunshine: version 2025.122.141614 only

Published 2025-09-09. Last modified 2026-06-17.