Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by `Automation Scripts` metadata in `ASS` subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted `ASS` file together with a referenced malicious Automation script, and opening the `AS` file executes arbitrary code with the privileges of the Aegisub process. From 3.4.0 to 3.4.2, inconsistent handling of embedded `NUL` characters between extension validation and filesystem operations additionally allows a crafted `ASS/Lua` polyglot to reference and execute itself as a single-file variant. The vulnerability is fixed in Aegisub 3.5.0.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d296db490c advisory.

    Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle     files containing associated Automation script references. The fix requires confirmation before loading     associated scripts, makes extension validation consistent with filesystem path interpretation, and     sanitizes embedded NUL characters in project metadata. Upstream advisory:
    https://github.com/TypesettingTools/Aegisub/security/advisories/GHSA-67hq-5vgg-6f23

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-78a11da997 advisory.

    Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle     files containing associated Automation script references. The fix requires confirmation before loading     associated scripts, makes extension validation consistent with filesystem path interpretation, and     sanitizes embedded NUL characters in project metadata. Upstream advisory:
    https://github.com/TypesettingTools/Aegisub/security/advisories/GHSA-67hq-5vgg-6f23

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0c6d4471fc advisory.

    Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle     files containing associated Automation script references. The fix requires confirmation before loading     associated scripts, makes extension validation consistent with filesystem path interpretation, and     sanitizes embedded NUL characters in project metadata. Upstream advisory:
    https://github.com/TypesettingTools/Aegisub/security/advisories/GHSA-67hq-5vgg-6f23

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads     Automation scripts referenced by `Automation Scripts` metadata in `ASS` subtitle projects without asking     whether the user trusts the scripts or their authors. An attacker can distribute a crafted `ASS` file     together with a referenced malicious Automation script, and opening the `AS` file executes arbitrary code     with the privileges of the Aegisub process. From 3.4.0 to 3.4.2, inconsistent handling of embedded `NUL`     characters between extension validation and filesystem operations additionally allows a crafted `ASS/Lua`     polyglot to reference and execute itself as a single-file variant. The vulnerability is fixed in Aegisub     3.5.0. (CVE-2026-92705)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
374591	Fedora 45 : aegisub (2026-d296db490c)	Nessus	Fedora Local Security Checks	Local	high
365517	Fedora 43 : aegisub (2026-78a11da997)	Nessus	Fedora Local Security Checks	Local	high
365512	Fedora 44 : aegisub (2026-0c6d4471fc)	Nessus	Fedora Local Security Checks	Local	high
364546	Linux Distros Unpatched Vulnerability : CVE-2026-92705	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-92705

high

Tenable Plugins

high

high

high

high