CVE-2026-30121
CRITICALremotion-dev remotion v4.0.409 - Arbitrary File Write
Title source: llmDescription
remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability.
References (1)
Core 1
Scores
CVSS v3
9.1
EPSS
0.0032
EPSS Percentile
24.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
CWE
CWE-123
Status
published
Products (2)
npm/remotion
0 - 4.0.410npm
remotion/remotion
4.0.409
Published
Jun 15, 2026
Tracked Since
Jun 16, 2026