CVE-2026-123208

The noname Electron desktop build (versions v1.11.2 through v1.11.6.1 ) is vulnerable to a Missing Authentication flaw in its local file server. The server utilizes wildcard CORS , enabling malicious websites to perform cross-origin requests to the /writeFile endpoint on localhost port 8089 . Thi...