Remote Code Execution Vulnerability in OriginLab Origin Viewer OPJU File Parsing
CVE-2026-114561

7.8HIGH

Key Information:

Vendor

Originlab

Status
Origin Viewer
Vendor
CVE Published:
12 November 2026

What is CVE-2026-114561?

A vulnerability in the OriginLab Origin Viewer allows remote attackers to execute arbitrary code via crafted OPJU files. The flaw arises from inadequate validation of user-supplied data during file parsing, resulting in an out-of-bounds write. An attacker must entice a user to visit a malicious webpage or to open a specially crafted OPJU file to exploit this vulnerability. Upon successful exploitation, the attacker could execute arbitrary code in the context of the affected process, compromising the system security.

Affected Version(s)

Origin Viewer 9.9.5

References

https://www.zerodayinitiative.com/advisories/ZDI-26-878/
x_research-advisory
https://docs.originlab.com/cve/CVE-2026-114561
vendor-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.