CVE-2026-30120: Remotion

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

remotion-dev remotion v4.0.409 was discovered to contain a remote code execution (RCE) vulnerability.

Affected products

• Remotion Remotion: version 4.0.409 only

Published 2026-06-15. Last modified 2026-06-17.