CVE-2026-123208

The noname Electron desktop build (versions v1.11.2 through v1.11.6.1 ) is vulnerable to a Missing Authentication flaw in its local file server. The server utilizes wildcard CORS , enabling malicious websites to perform cross-origin requests to the /writeFile endpoint on localhost port 8089 . Thi...

EUVD-2026-117653

noname Electron desktop build v1.11.2 through v1.11.6.1 contains an unauthenticated local file server with wildcard CORS that allows malicious websites to read, overwrite, or delete installation files. Attackers can send cross-origin requests to /writeFile on localhost port 8089 to overwrite...