CVEvulnerability

CVE-2026-17497

8.3 HIGH Published 2026-07-26 Modified 2026-10-24 Official page ↗
Status
Analyzed
Published
2026-07-26
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.3 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Weaknesses
CWE-1249, CWE-276, CWE-78

Description

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview (for example via chat XSS), this enables full remote code execution on the user's machine.

Affected configurations

• notegen notegen (< 0.32.0)

Related

Weakness · CWE (3)

  • CWE-1249 Application-Level Admin Tool with Inconsistent View of Underlying Operating System weakness
  • CWE-276 Incorrect Default Permissions weakness
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References