CVE-2026-17497: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in codexu NoteGen
NoteGen versions prior to 0.32.0 include a vulnerability where the Tauri shell plugin grants shell:allow-execute capability for bash, python, and python3 with arbitrary arguments by default. This allows JavaScript running in the application's webview to execute operating system commands with the privileges of the NoteGen process. If an attacker can execute scripts in the webview (e.g., via cross-site scripting), they can achieve full remote code execution on the user's machine.
AI Analysis
Technical Summary
CVE-2026-17497 is an OS command injection vulnerability in NoteGen before version 0.32.0. The application grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in its default desktop capabilities. This enables JavaScript code running in the app's webview to invoke plugin:shell|execute and run arbitrary OS commands with the same privileges as the NoteGen process. When combined with script execution vulnerabilities in the webview, such as chat-based XSS, this leads to full remote code execution on the host system.
Potential Impact
Successful exploitation allows an attacker to execute arbitrary operating system commands with the privileges of the NoteGen process, potentially leading to full remote code execution on the affected user's machine. This compromises confidentiality, integrity, and availability of the system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid running vulnerable versions of NoteGen and restrict untrusted JavaScript execution within the application webview to prevent exploitation.
CVE-2026-17497: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in codexu NoteGen
Description
NoteGen versions prior to 0.32.0 include a vulnerability where the Tauri shell plugin grants shell:allow-execute capability for bash, python, and python3 with arbitrary arguments by default. This allows JavaScript running in the application's webview to execute operating system commands with the privileges of the NoteGen process. If an attacker can execute scripts in the webview (e.g., via cross-site scripting), they can achieve full remote code execution on the user's machine.
CVSS v3.1
Score 8.3high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-17497 is an OS command injection vulnerability in NoteGen before version 0.32.0. The application grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in its default desktop capabilities. This enables JavaScript code running in the app's webview to invoke plugin:shell|execute and run arbitrary OS commands with the same privileges as the NoteGen process. When combined with script execution vulnerabilities in the webview, such as chat-based XSS, this leads to full remote code execution on the host system.
Potential Impact
Successful exploitation allows an attacker to execute arbitrary operating system commands with the privileges of the NoteGen process, potentially leading to full remote code execution on the affected user's machine. This compromises confidentiality, integrity, and availability of the system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid running vulnerable versions of NoteGen and restrict untrusted JavaScript execution within the application webview to prevent exploitation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- JFROG
- Date Reserved
- 2026-07-26T14:37:51.448Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a661f359c2644c7f8ea0a9c
Added to database: 07/26/2026, 14:52:37 UTC
Last enriched: 08/02/2026, 21:09:06 UTC
Last updated: 09/10/2026, 16:41:03 UTC
Views: 137
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.