CVE-2025-31477

CVE-2025-31477 concerns the Tauri shell plugin (prior to 2.2.1). The open endpoint allowed system-opening with protocols like file://, smb://, or nfs:// due to improper validation, enabling remote code execution when untrusted input is passed. Affected: tauri-plugin-shell before version 2.2.1. Mi...

CVE-2025-31477 Improper Scope Validation in the open Endpoint of tauri-plugin-shell

The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality to execute code and open programs on the system. The open endpoint of this plugin is designed to allow open functionality with the system opener e.g. xdg-open on Linux. This was...

CVE-2025-31477

The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality to execute code and open programs on the system. The open endpoint of this plugin is designed to allow open functionality with the system opener e.g. xdg-open on Linux. This was...

CVE-2025-31477 Improper Scope Validation in the open Endpoint of tauri-plugin-shell

The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality to execute code and open programs on the system. The open endpoint of this plugin is designed to allow open functionality with the system opener e.g. xdg-open on Linux. This was...

Official Tauri Plugins 输入验证错误漏洞

Official Tauri Plugins is an official Tauri plugin from Tauri Open Source. An input validation error vulnerability exists in versions of Official Tauri Plugins prior to 2.2.1, which stems from improper protocol validation and could lead to remote code execution...

PT-2025-14556 · Tauri · Tauri Shell Plugin

Name of the Vulnerable Software and Affected Versions: Tauri shell plugin versions prior to 2.2.1 Description: The Tauri shell plugin exposes functionality to execute code and open programs on the system. Due to improper validation of allowed protocols, potentially dangerous protocols like file:/...

CVE-2025-31477: Improper Input Validation

The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality to execute code and open programs on the system. The open endpoint of this plugin is designed to allow open functionality with the system opener e.g. xdg-open on Linux. This was...

CVE-2022-39215

Tauri is a framework for building binaries for all major desktop platforms. Due to missing canonicalization when readDir is called recursively, it was possible to display directory listings outside of the defined fs scope. This required a crafted symbolic link or junction folder inside an allowed...

MAL-2024-12069 Malicious code in squirreldisk-tauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21b61244e5ef1dd2b28d94395ad515353e3bcf1c00f2629376c95305ca4323e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in squirreldisk-tauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21b61244e5ef1dd2b28d94395ad515353e3bcf1c00f2629376c95305ca4323e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in tauri-plugin-autostart-api

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in tauri-plugin-autostart-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b142e694f8cc092c192ccd1c5256735955990e191b4b413415a7304ea45c582c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11180 Malicious code in tauri-plugin-autostart-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b142e694f8cc092c192ccd1c5256735955990e191b4b413415a7304ea45c582c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New RustyAttr Malware Targets macOS Through Extended Attribute Abuse

Threat actors have been found leveraging a new technique that abuses extended attributes for macOS files to smuggle a new malware called RustyAttr. The Singaporean cybersecurity company has attributed the novel activity with moderate confidence to the infamous North Korea-linked Lazarus Group,...

Malicious code in tauri-plugin-sql-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3081 Malicious code in tauri-plugin-sql-api (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-35222

Tauri is a framework for building binaries for all major desktop platforms. Remote origin iFrames in Tauri applications can access the Tauri IPC endpoints without being explicitly allowed in the dangerousRemoteDomainIpcAccess in v1 and in the capabilities in v2. Valid commands with potentially...

GHSA-57FM-592M-34R7 iFrames Bypass Origin Checks for Tauri API Access Control

Impact Remote origin iFrames in Tauri applications can access the Tauri IPC endpoints without being explicitly allowed in the dangerousRemoteDomainIpcAccess in v1 and in the capabilities in v2. This bypasses the origin check and allows iFrames to access the IPC endpoints exposed to the parent...

iFrames Bypass Origin Checks for Tauri API Access Control

Impact Remote origin iFrames in Tauri applications can access the Tauri IPC endpoints without being explicitly allowed in the dangerousRemoteDomainIpcAccess in v1 and in the capabilities in v2. This bypasses the origin check and allows iFrames to access the IPC endpoints exposed to the parent...

CVE-2024-35222 iFrames Bypass Origin Checks for Tauri API Access Control

Tauri is a framework for building binaries for all major desktop platforms. Remote origin iFrames in Tauri applications can access the Tauri IPC endpoints without being explicitly allowed in the dangerousRemoteDomainIpcAccess in v1 and in the capabilities in v2. Valid commands with potentially...