GIGABYTE Control Center Vulnerability Enables Remote Code Execution

A critical arbitrary file-write vulnerability (CVE-2026-4415, CVSS 9.2) was disclosed in GIGABYTE Control Center affecting versions 25.07.21.01 and earlier; the flaw allows unauthenticated remote attackers to write files anywhere on the OS, possibly resulting in remote code execution, privilege escalation, or denial-of-service. Users are urged to update to version 25.12.10.01 to mitigate the risk.