CVE-2026-41470 LIVE555 < 2026.04.22 RTSP Server Authorization Bypass via Session Token
Attackers can bypass authentication in LIVE555 RTSP servers by replaying session tokens, leading to stream disruption or server crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-41470?
CVE-2026-41470 is a high-severity authentication bypass vulnerability in LIVE555, published on 19 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP connection without authentication, causing server crashes through virtual function call errors or disrupting active streams by terminating victim sessions.
Weakness: CWE-863
Which versions are affected by CVE-2026-41470?
Linux distribution packages (1)
live555 openSUSE:Tumbleweed | All versions | 2026.04.22-1.1 |
How do I fix CVE-2026-41470?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-41470 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-41470 exists.
Sources
Also known as DEBIAN-CVE-2026-41470, GHSA-3x7c-xg4r-972q, UBUNTU-CVE-2026-41470, openSUSE-SU-2026:10881-1.