Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-16477— Insecure Deserialization of .cleanshot Files in CleanShot X

Quick assessment

Affected
MTW CleanShot X
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

macOS 版 CleanShot X 存在一个反序列化漏洞：该应用在不安全的情况下对嵌入在 项目文件（即可编辑的截图注释文件）中的不可信数据执行反序列化操作。利用此漏洞需要攻击者构造恶意的 文件，将其交付给目标用户，并诱使目标用户打开该文件；在解析过程中，恶意载荷将自动执行，从而以当前用户权限实现任意代码执行。从未从不可信来源打开过 文件的用户不受此漏洞影响。该漏洞已在以下版本中修复：4.5.2、4.6.3、4.7.8 和 4.8.10。

CVSS 8.4 · High

Affected Version Matrix 4

VendorProduct Version RangeStatus
MTW CleanShot X 4.0.0< 4.5.2 affected
4.6.0< 4.6.3 affected
4.7.0< 4.7.8 affected
4.8.0< 4.8.10 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-16477

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Insecure Deserialization of .cleanshot Files in CleanShot X
Source: CVE Program / CVE List V5
Vulnerability Description
CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file (editable screenshot annotations). Exploitation requires an attacker to craft a malicious .cleanshot file, deliver it to the target, and have the target open it; the payload then executes automatically during parsing, resulting in arbitrary code execution in the context of the current user. Users who have never opened a .cleanshot file from an untrusted source are not affected by this vulnerability. This vulnerability was fixed in versions: 4.5.2, 4.6.3, 4.7.8 and 4.8.10
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
Source: CVE Program / CVE List V5
Vulnerability Type
可信数据的反序列化
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
MTW CleanShot X 4.0.0 ~ 4.5.2 -

II. Public POCs for CVE-2026-16477

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-16477

请登录查看更多情报信息。

Security Blog Posts for CVE-2026-16477 (1)

Vendor Pages for CVE-2026-16477 (1)

IV. Related Vulnerabilities

Same weakness: CWE-502

V. Comments for CVE-2026-16477

No comments yet

Leave a comment