CVE-2026-17496

HighCVSS 8.1

Published: 26/07/2026(UTC)Updated: 25/08/2026(UTC)Translated: 26/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

24th percentile - higher than 24% of all known CVEs

Summary

NoteGen before version 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML without HTML sanitization and with CSP set to null. Attacker-controlled content can cause the model response to include executable markup, leading to XSS in the application context.

Risk Assessment

An attacker can execute arbitrary JavaScript in the privileged Tauri webview, enabling data theft, application modification, or further attacks.

Recommendation

Upgrade NoteGen to version 0.32.0 or later, which implements proper HTML sanitization and secure CSP settings.

Other vulnerabilities in NoteGen

CVE-2026-17497High
NoteGen before version 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments by default. JavaScript in the application webview can invoke plugin:shell|execute to run attacker-controlled OS commands with NoteGen process privileges.

Original NVD description (English source)

NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt (for example a malicious skill REFERENCE.md that instructs the model to emit HTML) can cause the model response to include executable markup such as an img onerror handler. When the user views the chat response, that markup runs as JavaScript in the privileged Tauri webview, enabling arbitrary script execution in the application context (cross-site scripting).