Aegisub

A high-severity vulnerability, CVE-2026-92705 with a CVSS score of 7.8, has been disclosed in Aegisub, a cross-platform advanced subtitle editor. All versions from 3.2.0 to 3.4.2 are affected: the software automatically loads Automation scripts referenced by ASS subtitle project metadata without asking users whether the scripts are trusted, potentially allowing malicious code execution when opening a crafted subtitle file. Security watchers are urging users to be cautious with untrusted subtitle files.