NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python
Summary
| CVE | CVE-2026-17497 |
|---|---|
| State | PUBLISHED |
| Assigner | JFROG |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-07-26 15:16:27 UTC |
| Updated | 2026-07-26 15:16:27 UTC |
| Description | NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview (for example via chat XSS), this enables full remote code execution on the user's machine. |
Risk And Classification
Primary CVSS: v3.1 8.3 HIGH from [email protected]
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Problem Types: CWE-78 | CWE-276 | CWE-1249 | CWE-78 CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | CWE-1249 CWE-1249 Application-Level admin tool with inconsistent view of underlying operating system | CWE-276 CWE-276 Incorrect default permissions
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 8.3 | HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H |
| 3.1 | CNA | CVSS | 8.3 | HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H |
CVSS v3.1 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| github.com/codexu/note-gen/commit/00064a4a8ec4177d51094ffb3e15bf0758009c1f | [email protected] | github.com | |
| github.com/codexu/note-gen | [email protected] | github.com | |
| github.com/codexu/note-gen/releases/tag/note-gen-v0.32.0 | [email protected] | github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Yuval Moravchick (en)
CNA: JFrog Security Research (en)
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| CNA | 2026-06-08T00:00:00.000Z | Vulnerability discovered and PoC verified |
| CNA | 2026-07-20T00:00:00.000Z | Fix released in NoteGen v0.32.0 (shell capability lockdown) |
Solutions
CNA: Upgrade to NoteGen 0.32.0 or later. The fix removes shell:allow-execute entries that permitted bash, python, and python3 with attacker-controlled arguments from the default Tauri capabilities, closing the webview-to-OS command execution path.
Exploits
CNA: A proof of concept obtains JavaScript execution in the webview (via malicious skill-driven chat XSS) and then calls window.__TAURI__.core.invoke('plugin:shell|execute', { program: 'bash', args: ['-c', '<command>'], ... }) to open Calculator and exfiltrate local files to an attacker-controlled server.