CVE-2026-4415 is a high severity arbitrary file write (CVSS 8.1) in Gigabyte Control Center, version 25.07.21.01 and earlier. When the pairing feature is enabled, an unauthenticated remote attacker can write files anywhere on the system. Update to 25.12.10.01 or later and turn pairing off if unused.
What's affected
From the TWCERT/CC advisory (TVN-202603008):
- Affected: Gigabyte Control Center 25.07.21.01 and earlier.
- Fixed: 25.12.10.01 or later.
The flaw applies when the pairing feature is enabled. The advisory credits a researcher named David Spruengli. The record gives a high attack complexity, so exploitation is not trivial, but the impact on the machine is full.
How to check if you're exposed
Open Gigabyte Control Center and read the version number in the settings or about page, or check installed programs on Windows:
Get-Package -Name "*Gigabyte Control Center*" | Select Name, Version
Then check whether the pairing feature is turned on in the application settings. If you manage many machines, use your endpoint inventory to find the application and its version.
What to do now
- Update Gigabyte Control Center to 25.12.10.01 or later.
- Turn off the pairing feature if you do not use it.
- Keep the machine off untrusted networks until it is updated.
- Include the application in your endpoint inventory so future advisories are easy to match.
Why it matters
The record lists CWE-23 (relative path traversal) and CWE-787 (out of bounds write). The service accepts a file from a remote peer and writes it to a location the sender can influence. Because the application runs with high privileges, a file placed in the right folder leads to code execution or privilege escalation, as the advisory states.
Vendor utilities that ship with hardware are easy to forget in software inventories, and they often run as services with broad rights. They deserve the same patch tracking as server software.
The record does not mark this CVE as KEV.
Quick check
Is pairing on by default?
The advisory does not say. Check the setting in your installation.
Sources
Last reviewed: 19 October 2026.
