CVE-2026-17497

HighCVSS 8.3

Published: 26/07/2026(UTC)Updated: 25/08/2026(UTC)Translated: 26/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

38th percentile - higher than 38% of all known CVEs

Summary

NoteGen before version 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments by default. JavaScript in the application webview can invoke plugin:shell|execute to run attacker-controlled OS commands with NoteGen process privileges.

Risk Assessment

An attacker can achieve full remote code execution on the user's machine, leading to complete system compromise.

Recommendation

Upgrade NoteGen to version 0.32.0 or later, which removes excessive shell plugin permissions.

Other vulnerabilities in NoteGen

CVE-2026-17496High
NoteGen before version 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML without HTML sanitization and with CSP set to null. Attacker-controlled content can cause the model response to include executable markup, leading to XSS in the application context.

Original NVD description (English source)

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview (for example via chat XSS), this enables full remote code execution on the user's machine.