← Back to the live CVE advisory feed

CVE-2026-17496: NoteGen

Severity

8.1 (HIGH)

Vendor

CODEXU

Affected versions

0 through before 0.32.0

Fixed version

0.32.0

Patch status

Patched

Published

2026-07-26T15:16:27.710

Modified

2026-07-26T15:16:27.710

Why it matters

High-severity vulnerability requiring prioritized review.

Recommended admin actions

• Review and patch based on exposure, asset criticality, and business impact.
• Compare installed versions against the affected version range in the advisory.
• Review logs for suspicious activity related to the affected application or component.

Technical summary

NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt (for example a malicious skill REFERENCE.md that instructs the model to emit HTML) can cause the model response to include executable markup such as an img onerror handler. When the user views the chat response, that markup runs as JavaScript in the privileged Tauri webview, enabling arbitrary script execution in the application context (cross-site scripting).

View the official NVD record for CVE-2026-17496

CVE data is sourced from NVD/CNA records and optional enrichment. Validate against the vendor advisory before taking production action.