CVE-2026-17496
Received Received - Intake

Stored XSS in NoteGen AI Chat Application

Publication date: 2026-07-26

Last updated on: 2026-07-26

Assigner: JFrog

Description
NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt (for example a malicious skill REFERENCE.md that instructs the model to emit HTML) can cause the model response to include executable markup such as an img onerror handler. When the user views the chat response, that markup runs as JavaScript in the privileged Tauri webview, enabling arbitrary script execution in the application context (cross-site scripting).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-26
Last Modified
2026-07-26
Generated
2026-07-26
AI Q&A
2026-07-26
EPSS Evaluated
N/A
NVD
CVE-2026-17496
EUVD
EUVD-2026-49055

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
codexu note_gen 0.32.0
codexu note_gen to 0.32.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in NoteGen before version 0.32.0. It allows attackers to inject malicious HTML into AI chat responses through markdown rendering with unsafe settings. The application uses dangerouslySetInnerHTML to display responses without sanitizing HTML, and the Content Security Policy is disabled. This enables attackers to execute arbitrary JavaScript in the application context via crafted prompts.

Impact Analysis

An attacker could exploit this to run malicious scripts in your NoteGen application. This could lead to data theft, unauthorized actions, or full control of the application if you view a specially crafted chat response. The attack requires tricking you into viewing a malicious response, but no special privileges are needed beyond that.

Compliance Impact

This vulnerability could lead to unauthorized access or exfiltration of sensitive data, violating GDPR and HIPAA requirements for data protection. Organizations using NoteGen may face compliance violations if exploited, potentially resulting in legal penalties or loss of certification.

Mitigation Strategies

Upgrade NoteGen to version 0.32.0 or later to address the markdown rendering and sanitization issues. Disable CSP null settings and implement HTML sanitization for user-controlled content before rendering in the DOM.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17496. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart