DLL Search-Order Hijacking Vulnerability in Sunshine for Windows

CVE-2025-10198

What is CVE-2025-10198?

Sunshine for Windows version v2025.122.141614 is susceptible to a DLL search-order hijacking vulnerability. This flaw enables attackers to exploit user-writeable PATH directories, potentially allowing the insertion of malicious DLLs. Such a vulnerability could lead to unauthorized code execution, offering attackers an opportunity to compromise affected systems. Users of Sunshine for Windows are urged to review their configurations and stay updated to mitigate risks associated with this issue.

References