CVE-2026-17497
Received Received - Intake

Remote Code Execution in NoteGen via Shell Plugin

Publication date: 2026-07-26

Last updated on: 2026-07-26

Assigner: JFrog

Description
NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview (for example via chat XSS), this enables full remote code execution on the user's machine.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-26
Last Modified
2026-07-26
Generated
2026-07-26
AI Q&A
2026-07-26
EPSS Evaluated
N/A
NVD
CVE-2026-17497
EUVD
EUVD-2026-49056

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
codexu note-gen 0.32.0
codexu note-gen to 0.32.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-276 During installation, installed file permissions are set to allow anyone to modify those files.
CWE-1249 The product provides an application for administrators to manage parts of the underlying operating system, but the application does not accurately identify all of the relevant entities or resources that exist in the OS; that is, the application's model of the OS's state is inconsistent with the OS's actual state.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-17497 is a vulnerability in NoteGen versions before 0.32.0. It allows JavaScript in the application's webview to execute arbitrary operating system commands via the Tauri shell plugin. The default desktop capabilities grant shell:allow-execute permission for bash, python, and python3, enabling remote code execution if combined with webview script execution like chat XSS.

Detection Guidance

Check if NoteGen is running versions before 0.32.0 by inspecting installed versions or update logs. Look for unexpected shell commands executed by the application, especially involving bash, python, or python3 with arbitrary arguments. Review application logs for suspicious JavaScript execution in the webview triggering shell commands.

Impact Analysis

An attacker could exploit this to run malicious commands on your machine with the same privileges as the NoteGen application. This could lead to data theft, system compromise, or further network attacks. Users of affected versions are at risk if they interact with untrusted content in the webview.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection principles or HIPAA's security requirements for protected health information. Organizations using NoteGen may face compliance violations if exploited, potentially resulting in legal penalties or reputational damage.

Mitigation Strategies

Upgrade NoteGen to version 0.32.0 or later to remove default shell execution permissions for bash, python, and python3. Disable or restrict the Tauri shell plugin capabilities in application configurations. Implement network monitoring to detect unusual command execution attempts from the application.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17497. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart