CVE-2023-36658

HIGH 7.8CVE-2023-36658 · Published 15/09/2023 · updated 17/06/2026

In short

CVE-2023-36658 is a HIGH (CVSS 7.8) vulnerability affecting media validation agent (opswat), metadefender kiosk (opswat).
Chance of exploitation in the next 30 days (EPSS): 0.23%, higher than 13.8% of all vulnerabilities.
Fix: update to 2.0.7, 4.6.2 or later.

Package	Affected versions	Patched versions
media validation agent opswat	`≥ 2.0.0, < 2.0.7`	`2.0.7`
metadefender kiosk opswat	`≥ 4.2, < 4.6.2`	`4.6.2`

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.