CVE-2026-17497

NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python

State: Published
Severity: 8.3 High
Published: Jul 26, 2026
Updated: Jul 27, 2026
Reserved: Jul 26, 2026

Description

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview (for example via chat XSS), this enables full remote code execution on the user's machine.

Scores

CVSS	Score	Vector	Source
3.1	8.3 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H	JFROG

Weaknesses

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-1249 Application-Level admin tool with inconsistent view of underlying operating system
CWE-276 Incorrect default permissions

Affected Products

Product	Versions
NoteGencodexu	before 0.32.0Affected

References

Fix: remove unrestricted shell execute for bash/python; harden skill script executionpatch
NoteGen v0.32.0 releasevendor-advisory
NoteGen repositoryproduct

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.