CVE-2026-111935
LowCVSS 2.6Summary
NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing image_inspect to send local images to the AI provider.
Risk Assessment
The vulnerability may lead to unauthorized disclosure of local image files to third parties (the AI provider), posing a risk to data confidentiality.
Recommendation
Update NoteGen to a version newer than 0.38.3 or apply the vendor patch; restrict write access to the sync target and validate sourceUrl paths.
Other vulnerabilities in NoteGen
See all- CVE-2026-17497High
NoteGen before version 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments by default. JavaScript in the application webview can invoke plugin:shell|execute to run attacker-controlled OS commands with NoteGen process privileges.
- CVE-2026-17496High
NoteGen before version 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML without HTML sanitization and with CSP set to null. Attacker-controlled content can cause the model response to include executable markup, leading to XSS in the application context.
Original NVD description (English source)
NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing image_inspect to send local images to the AI provider.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS