CVE-2025-68921

SteelSeries Nahimic 3 1.10.7 allows Directory traversal

High · published January 16, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
28.5
In the wild
Unconfirmed
What it is

⚡ A sneaky directory traversal flaw in SteelSeries Nahimic 3 can give an attacker unexpected access to sensitive files! Think of it like a delivery mix-up where a courier accidentally delivers your private documents to the wrong address—it’s a simple mistake that can lead to big consequences! With this vulnerability, an attacker could exploit the flaw to traverse directories and gain access to sensitive data on your system. The end result? They could read private files or worse, leading to potentially devastating data exposure.

Put simply

Think of it like a delivery mix-up where a courier accidentally delivers your private documents to the wrong address—it’s a simple mistake that can lead to big consequences! The vulnerability allows an attacker to manipulate directory paths, enabling unauthorized access to files outside the intended directory structure. This is particularly dangerous as it bypasses standard security measures.

What to do

With this vulnerability, an attacker could exploit the flaw to traverse directories and gain access to sensitive data on your system. The end result? They could read private files or worse, leading to potentially devastating data exposure. To remediate this issue, users should immediately update SteelSeries Nahimic 3 to the latest version, 1.10.8, which addresses this flaw. Additionally, review and tighten file access controls to ensure sensitive files are properly secured. You've got this! With these steps, you'll keep your system safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00359 · 28.5th percentile
Published
2026-01-16T00:00Z
EPSS history
Timeline
  • 16 JAN 00:00Z
    SteelSeries Nahimic 3 1.10.7 allows Directory traversal
    cvelistv5