Remote Control Server Vulnerability in eremef Bandcamp Player
CVE-2026-112104

6.9MEDIUM

Key Information:

Vendor

Eremef

Status
Bandcamp-player
Vendor
CVE Published:
19 October 2026

What is CVE-2026-112104?

A security flaw has been identified in the Remote Control Server component of eremef's bandcamp-player, affecting versions up to 1.8.33-beta. The vulnerability arises from an inadequate authentication mechanism within the database.ts file, allowing an attacker to manipulate the remoteEnabled parameter, potentially leading to unauthorized access. Remediation is available by upgrading to version 1.8.34-beta, which includes necessary patches to eliminate this security risk. It is highly recommended to apply the update promptly to safeguard against possible remote exploitation.

Affected Version(s)

bandcamp-player 1.8.33-beta

bandcamp-player 1.8.34-beta

References

https://vuldb.com/vuln/422045
vdb-entrytechnical-description
https://vuldb.com/vuln/422045/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-112104
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

NeoWSY (VulDB User)
.