Threat database

EdgeEver Desktop versions 1.6.26 through 1.112.0 have a navigation allowlist bypass vulnerability. This flaw allows attackers to load arbitrary origins in the main window by exploiting string-prefix URL matching. By embedding a link with userinfo syntax after the dev-server prefix, attackers can access sensitive components such as the edgeeverDesktop bridge, session token, sidecar RPC, and ACP channels. The vulnerability has a high severity score of 8.4 CVSS v4.0.

EdgeEver versions 1.6.0 through 1.112.0 contain a stored cross-site scripting (XSS) vulnerability in the TemplatesPane.tsx component. This vulnerability arises because template contentMarkdown is rendered with raw HTML using dangerouslySetInnerHTML without proper sanitization. An attacker can exploit this by writing templates with malicious HTML event handlers via an API or MCP token, enabling script execution during preview and potentially accessing the privileged window.edgeeverDesktop bridge.

EdgeEver versions from 0.1.0 up to and including 1.112.0 contain a stored cross-site scripting (XSS) vulnerability in the setMemoDragPreview function. This flaw allows attackers to inject malicious scripts via notebook names or memo titles, which execute when dragging these elements. Exploitation requires the attacker to set malicious names through MCP create_notebook, rename_notebook, or create_memo tools. The injected script can access the desktop bridge's session token, posing a significant security risk.

EdgeEver Desktop versions 1.92.0 through 1.112.0 have a remote code execution vulnerability in the desktop:acp-probe IPC handler. This handler fails to verify the sender and executes a caller-supplied executable path. Attackers able to run scripts in a renderer context, such as via stored cross-site scripting in certain preview features, can exploit this to launch local executables with the user's privileges.

EdgeEver versions up to 1.108.0 have a missing authorization vulnerability in the Hono API memo-template routes. This flaw allows users with scoped API tokens lacking certain permissions to bypass token scope restrictions and perform unauthorized actions such as creating memos and modifying templates within the token owner's workspace.