EM-20261104-V2EJ VulnerabilityHigh severity

Pixar Animation Studio OpenUSD Crate File Vulnerability (CVE-2026-92211)

CVE-2026-92211

Status

Developing

Since Nov 04 00:17 UTC: signals keep joining.

First Signal: Nov 03 23:49 UTCC41 Red Hat Security Data
Page Born: Nov 04 00:17 UTCsecond source joined
Last Signal: Nov 04 00:17 UTC2 days before snapshot
Sources: 21 official · 1 research, news or crowd
Open For: 2 daysso far

Life Of This Page

1
Born

Nov 04 00:17 UTC
A second, independent source names it.
2
Developing · Now

Nov 04 00:17 UTC
New signals join; severity can move.
3
Confirmed

Not yet
CISA KEV lists it, or exploitation in the wild is reported.
4
Resolved

Not yet
Past the fix deadline and 14 days with no new signal.
5
Archived

Not yet
30 days after resolved. Read only; the link keeps working. Reopens if it comes back.

The ID never changes, and earlier addresses keep working. A correction is logged, never overwritten. If two pages turn out to be one incident, the later one points to the earlier.

Vulnerability Lifecycle

Disclosed: reached

Nov 04 00:17 UTC
C6 NVD published
Scored: reached

Nov 04 00:17 UTC
CVSS 7.8 · EPSS 0.2%
Exploited: not yet

Not yet
No exploitation reported
Advisories: not yet

Not yet
None yet
Vendor Response: reached

Nov 03 23:49 UTC
C41 published
Resolved: not yet

Not yet
After 14 quiet days

Timeline

Point at a mark to read it. Squares are signals, colored by severity; every one is also listed under Signals.

Signals

Nov 04 00:17 UTCCVE-2026-92211 (CVSS 7.8) (opens source in a new tab) Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Pixar Animation Studio … High severityDatabaseC6 NVD CVE API 2.0
Nov 03 23:49 UTCRed Hat: CVE-2026-92211 (important) (opens source in a new tab) openusd: openusd: Arbitrary code execution via double-free in crate file parsing High severityVendorC41 Red Hat Security Data