CVE-2026-123208

A flaw was found in noname. The Electron desktop application runs an unauthenticated local file server configured with overly permissive Cross-Origin Resource Sharing CORS settings. A remote attacker can exploit this flaw by tricking a user into visiting a malicious website that sends cross-origi...