Loading vulnerability…
Remote Code Execution in NoteGen Tauri Shell Plugin Configuration
CVE-2026-17497 affects NoteGen versions before 0.32.0. The vulnerability is caused by an overly permissive Tauri shell plugin configuration in the default desktop capabilities that grants shell:allow-execute access for bash, python, and python3 with arbitrary arguments. As a result, JavaScript executing inside the application's webview can invoke the shell execution interface to launch attacker-controlled operating system commands with the privileges of the NoteGen process. In scenarios where an attacker can achieve script execution in the webview, such as through a cross-site scripting condition in chat content, the issue can be chained into full remote code execution on the user's machine.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows execution of arbitrary operating system commands in the context of the NoteGen process. This can lead to full compromise of the affected user account's confidentiality, integrity, and availability, including access to local data available to the application, modification or destruction of user content, installation of additional payloads, and broader system compromise depending on the privileges of the running process.
If you can’t patch tonight, do this now.
If immediate patching is not possible, reduce exposure by preventing untrusted or attacker-controlled JavaScript from executing in the application webview, including eliminating webview script injection paths such as chat-based XSS. Restrict use of vulnerable NoteGen versions in untrusted content-handling environments and review Tauri capability settings to ensure shell execution is not exposed more broadly than required.
Patch, then assume compromise.
Upgrade NoteGen to version 0.32.0 or later. The fixed release removes or corrects the overly broad shell execution capability exposure in the desktop application configuration. Ensure all deployed desktop builds are updated to a non-vulnerable version.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
8 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.