Textream is a free macOS teleprompter app.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 2, 2026 · NIST NVD

   Detected

   Textream is a free macOS teleprompter app. Prior to version 1.5.1, the WebSocket server imposes no limit on concurrent connections. Combined with a broadcast timer that sends state to all connected clients every 100 ms, an attacker can exhaust CPU and memory by flooding the server with connections, causing the Textream application to freeze and crash during a live session. Version 1.5.1 fixes the

2. Jun 17, 2026 · NIST NVD

   Updated

   Textream is a free macOS teleprompter app. Prior to version 1.5.1, the WebSocket server imposes no limit on concurrent connections. Combined with a broadcast timer that sends state to all connected clients every 100 ms, an attacker can exhaust CPU and memory by flooding the server with connections, causing the Textream application to freeze and crash during a live session. Version 1.5.1 fixes the

Affected

• cpe fka/textreamversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-28412

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-28412

  Textream is a free macOS teleprompter app. Prior to version 1.5.1, the WebSocket server imposes no limit on concurrent connections. Combined with a broadcast timer that sends state to all connected clients every 100 ms, an attacker can exhaust CPU and memory by f

  nvd.nist.gov

References

• Patch · github.com
• Exploit · github.com