Remote Code Execution in OriginLab Origin Viewer (CVE‑2026‑114560) Allows Arbitrary Code Execution via Malicious OPJ Files
What It Is — The Zero Day Initiative advisory (ZDI‑26‑877) details an out‑of‑bounds write in the OPJ file parser of OriginLab Origin Viewer. A specially crafted OPJ file can cause the application to write past an allocated buffer, letting a remote attacker execute arbitrary code in the context of the viewer process. Exploitation requires user interaction (opening a malicious file or visiting a page that triggers the file). The flaw is assigned CVE‑2026‑114560, CVSS 7.8 (High), and OriginLab has released a patch.
Affected Products — OriginLab Origin Viewer (all versions prior to the November 2026 security update).
Why It Matters for Trust & Control Assurance — The issue underscores the need for a robust patch‑management and secure‑configuration control objective; timely remediation provides audit‑ready evidence that the organization meets the “maintain up‑to‑date software” requirement across multiple frameworks.
Recommended Actions —
- Deploy OriginLab’s November 2026 update to all Origin Viewer installations immediately.
- Verify patch deployment with an inventory scan and record remediation evidence.
- Integrate vendor advisory feeds into a continuous monitoring process to ensure future vulnerabilities are detected and addressed promptly.
Source: Zero Day Initiative Advisory