CVE-2026-18445: CWE-190 Integer overflow or wraparound in NI LabVIEW

CVE-2026-18445 is an integer overflow vulnerability (CWE-190) in NI LabVIEW that results in an out-of-bounds write. Successful exploitation requires user interaction by opening a malicious VI file, which may lead to information disclosure or arbitrary code execution. The vulnerability affects NI LabVIEW versions 23.1.0, 24.1.0, 25.1.0, and 26.1.0. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

The vulnerability can lead to information disclosure and arbitrary code execution on affected systems if a user opens a specially crafted VI file. This could compromise confidentiality, integrity, and availability of the affected system. The CVSS score of 6.6 reflects a medium severity with local attack vector, low attack complexity, no privileges required, and user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid opening VI files from untrusted sources to mitigate risk.