Remote Code Execution in OriginLab Origin Viewer (CVE‑2026‑114561) — Out‑of‑Bounds Write in OPJU Parsing
What It Is — A remote‑code‑execution (RCE) flaw (CVE‑2026‑114561) exists in OriginLab Origin Viewer’s handling of OPJU files. The parser fails to validate the length of user‑supplied data, leading to an out‑of‑bounds write. An attacker who convinces a victim to open a malicious OPJU file or visit a crafted web page can execute arbitrary code in the context of the Origin Viewer process. The vulnerability is rated CVSS 7.8 (High) with network‑local access, low complexity, required user interaction, and impacts confidentiality, integrity, and availability. OriginLab has released a patch; users should upgrade immediately.
Affected Products
- OriginLab Origin Viewer (all versions prior to the November 2026 security update).
Why It Matters for Trust & Control Assurance
The flaw highlights the need for a robust vulnerability‑management control that ensures timely identification, assessment, and remediation of software defects—an objective that maps to multiple compliance frameworks.
Recommended Actions
- Apply OriginLab’s November 2026 patch or upgrade to the latest Origin Viewer release.
- Verify the installed version across all endpoints and update inventory records.
- Run an internal vulnerability scan to confirm the fix is effective.
- Document the remediation workflow (detection → patch → verification) as audit evidence.
- Incorporate the patch‑tracking process into your continuous control‑mapping program.
Source: Zero Day Initiative advisory