CVE-2026-16477
Description
CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file (editable screenshot annotations). Exploitation requires an attacker to craft a malicious .cleanshot file, deliver it to the target, and have the target open it; the payload then executes automatically during parsing, resulting in arbitrary code execution in the context of the current user. Users who have never opened a .cleanshot file from an untrusted source are not affected by this vulnerability. This vulnerability was fixed in versions: 4.5.2, 4.6.3, 4.7.8 and 4.8.10
How to fix
- MTW CleanShot X4.5.2, 4.6.3, 4.7.8, 4.8.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| MTW CleanShot X | 4.0.0 ≤ v < 4.5.2, 4.6.0 ≤ v < 4.6.3, 4.7.0 ≤ v < 4.7.8, 4.8.0 ≤ v < 4.8.10 | 4.5.2, 4.6.3, 4.7.8, 4.8.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.