CVE-2026-102875 | VideoLAN VLC up to 3.0.23 skins2 ThemeLoader path traversal

September 29, 2026 Yanac

A vulnerability was found in VideoLAN VLC up to 3.0.23. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component skins2 ThemeLoader. The manipulation results in path traversal.

This vulnerability is cataloged as CVE-2026-102875. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More