CVE-2026-55408
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Koodo Reader version 2.3.0 and earlier is vulnerable to remote code execution via malicious EPUB files. The vulnerability is due to nodeIntegrationInSubFrames being enabled in the open-book IPC handler and EPUB chapter content being rendered with unsanitized innerHTML. An attacker can craft an EPUB that, when imported and opened, creates a hidden iframe with Node.js API access and executes arbitrary OS commands with the victim's privileges.
Risk Assessment
The risk to the organization is that an attacker can gain full control over a user's workstation by opening a crafted EPUB file. This could lead to data theft, malware installation, or further attacks within the internal network.
Recommendation
Immediately update Koodo Reader to version 2.3.1 or later. Until the update is applied, avoid opening EPUB files from untrusted sources.
Original NVD description (English source)
Koodo Reader is an ebook reader. In version 2.3.0 and earlier, Koodo Reader is vulnerable to remote code execution through malicious EPUB files because the open-book IPC handler enables nodeIntegrationInSubFrames and EPUB chapter content is rendered with unsanitized innerHTML. An attacker can craft an EPUB book that, when imported and opened by the victim, instantiates a hidden iframe with Node.js API access and executes arbitrary operating system commands with the victim user's privileges. This issue is fixed in version 2.3.1.