CVE-2026-17497

{
  "id": "CVE-2026-17497",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-26T15:16:27.873",
  "lastModified": "2026-10-24T13:10:00.147",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview (for example via chat XSS), this enables full remote code execution on the user's machine."
    },
    {
      "lang": "es",
      "value": "NoteGen anterior a la versión 0.32.0 otorga al plugin de shell de Tauri la capacidad shell:allow-execute para bash, python y python3 con argumentos arbitrarios en las capacidades de escritorio predeterminadas. JavaScript ejecutándose en la webview de la aplicación puede, por lo tanto, invocar plugin:shell|execute para ejecutar comandos del sistema operativo controlados por el atacante con los privilegios del proceso de NoteGen. En combinación con la ejecución de scripts en la webview (por ejemplo, a través de XSS en el chat), esto permite la ejecución remota de código completa en la máquina del usuario."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "codexu",
          "product": "NoteGen",
          "defaultStatus": "unaffected",
          "collectionURL": "https://github.com/codexu/note-gen",
          "packageName": "note-gen",
          "programFiles": [
            "src-tauri/capabilities/default.json",
            "src-tauri/capabilities/desktop.json"
          ],
          "repo": "git://github.com/codexu/note-gen",
          "versions": [
            {
              "version": "0",
              "lessThan": "0.32.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
          "baseScore": 8.3,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.6,
        "impactScore": 6.0
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-27T14:48:49.754931Z",
          "id": "CVE-2026-17497",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        },
        {
          "lang": "en",
          "value": "CWE-276"
        },
        {
          "lang": "en",
          "value": "CWE-1249"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:notegen:notegen:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "0.32.0",
              "matchCriteriaId": "5F83DD43-1270-4565-A7C2-571006205DDC"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/codexu/note-gen",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    },
    {
      "url": "https://github.com/codexu/note-gen/commit/00064a4a8ec4177d51094ffb3e15bf0758009c1f",
      "source": "[email protected]",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "https://github.com/codexu/note-gen/releases/tag/note-gen-v0.32.0",
      "source": "[email protected]",
      "tags": [
        "Product",
        "Release Notes"
      ]
    }
  ]
}