NoteGen is vulnerable to Arbitrary OS Command Execution via Tauri shell:allow-execute for bash/python
note-gen (NoteGen)
< 0.32.0
NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview, for example via chat XSS (CVE-2026-17496), this enables full remote code execution on the user's machine.
Step 1 - Obtain JavaScript execution in the NoteGen webview
Use chat XSS (CVE-2026-17496) or another webview script sink so attacker JavaScript runs inside NoteGen < 0.32.0 on a default installation.
Step 2 - Invoke the Tauri shell execute API
From the webview, call:
window.__TAURI__.core.invoke('plugin:shell|execute', {
program: 'bash',
args: ['-c', 'open -a Calculator'],
options: { cwd: null, env: null, encoding: 'utf-8' }
});
Step 3 - Verify OS command execution
Expected result: Calculator opens as the NoteGen user, proving arbitrary OS command execution via bash -c. The same path can read local files and exfiltrate them to an attacker-controlled server.
Upgrade to NoteGen 0.32.0 or later. The fix removes shell:allow-execute entries that permitted bash, python, and python3 with attacker-controlled arguments from the default Tauri capabilities, closing the webview-to-OS command execution path.
https://github.com/advisories/GHSA-r5ff-hq22-rhgv https://github.com/codexu/note-gen/commit/00064a4a8ec4177d51094ffb3e15bf0758009c1f https://github.com/codexu/note-gen/releases/tag/note-gen-v0.32.0