An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization,… (CVE-2026-68004)
OSSRS SRS (Simple Realtime Server) versions prior to 5.0.213 contain a vulnerability in the RTMP publish authorization mechanism that allows remote attackers to execute arbitrary code. The flaw is related to the vhost-level security configuration and the SrsSecurity::check() function within the RTMP listener components. This issue can lead to unauthorized code execution if exploited.
AI Analysis
Technical Summary
A remote code execution vulnerability exists in OSSRS SRS versions before 5.0.213 due to improper handling in the RTMP publish authorization process. Specifically, the vulnerability arises from the vhost-level security configuration and the SrsSecurity::check() function in the RTMP listener components, enabling a remote attacker to execute arbitrary code on the server.
Potential Impact
Successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code on the affected OSSRS SRS server, potentially leading to full system compromise or unauthorized control over the server's streaming functionality.
Mitigation Recommendations
Upgrade OSSRS SRS to version 5.0.213 or later, where this vulnerability is fixed. No other mitigation details are provided; applying the official fix is the recommended remediation.
An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization,… (CVE-2026-68004)
Description
OSSRS SRS (Simple Realtime Server) versions prior to 5.0.213 contain a vulnerability in the RTMP publish authorization mechanism that allows remote attackers to execute arbitrary code. The flaw is related to the vhost-level security configuration and the SrsSecurity::check() function within the RTMP listener components. This issue can lead to unauthorized code execution if exploited.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
A remote code execution vulnerability exists in OSSRS SRS versions before 5.0.213 due to improper handling in the RTMP publish authorization process. Specifically, the vulnerability arises from the vhost-level security configuration and the SrsSecurity::check() function in the RTMP listener components, enabling a remote attacker to execute arbitrary code on the server.
Potential Impact
Successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code on the affected OSSRS SRS server, potentially leading to full system compromise or unauthorized control over the server's streaming functionality.
Mitigation Recommendations
Upgrade OSSRS SRS to version 5.0.213 or later, where this vulnerability is fixed. No other mitigation details are provided; applying the official fix is the recommended remediation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-fchr-h2rx-xx6p
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-68004"]
Threat ID: 6a838c37bf8831d539b4b35f
Added to database: 08/17/2026, 22:33:27 UTC
Last enriched: 09/12/2026, 00:03:31 UTC
Last updated: 10/02/2026, 02:46:05 UTC
Views: 51
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.