---
id: 4062
title: "RetroArch for Windows, Versions 1.9.0 - 1.9.4 Advisory"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/retroarch-for-windows-1-9-0-advisory"
published_at: "2021-06-15T00:00:00Z"
tags: ["windows", "powershell", "vulnerability", "advisory", "command-injection", "retroarch"]
phying_url: "https://phying.com/item/4062"
lang: en
---

# RetroArch for Windows, Versions 1.9.0 - 1.9.4 Advisory

## Summary

Advisory: RetroArch for Windows 1.9.0-1.9.4 text-to-speech passes unsanitized filenames to PowerShell, so crafted file or directory names execute commands when read aloud; disable TTS until patched.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2021-06-15T00:00:00Z
- **Original:** https://bishopfox.com/blog/retroarch-for-windows-1-9-0-advisory
- **Phying News:** https://phying.com/item/4062