CVE-2026-17497
HIGH
8,3
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: required
Scope: changed
Confidentiality: high
Integrity: high
Availability: high
Description
AI Translation Available
NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview (for example via chat XSS), this enables full remote code execution on the user's machine.
78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
StableCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Availability
Non-Repudiation
Potential Impacts:
Execute Unauthorized Code Or Commands
Dos: Crash, Exit, Or Restart
Read Files Or Directories
Modify Files Or Directories
Read Application Data
Modify Application Data
Hide Activities
Applicable Platforms
Technologies:
Not Technology-Specific, AI/ML, Web Server
276
Incorrect Default Permissions
DraftCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Potential Impacts:
Read Application Data
Modify Application Data
Applicable Platforms
Technologies:
Not Technology-Specific, ICS/OT
1249
Application-Level Admin Tool with Inconsistent View of Underlying Operating System
IncompleteCommon Consequences
Security Scopes Affected:
Access Control
Accountability
Other
Potential Impacts:
Varies By Context
Hide Activities
Unexpected State
Applicable Platforms
Technologies:
Web Based
https://github.com/codexu/note-gen
https://github.com/codexu/note-gen/commit/00064a4a8ec4177d51094ffb3e15bf0758009…
https://github.com/codexu/note-gen/releases/tag/note-gen-v0.32.0