NoteGen before 0.32.0 leaks a Tauri shell plugin with the shell:allow-execute capability for the binaries bash, python, and python3. These capabilities let JavaScript loaded in the application webview call plugin:shell|execute with any command line arguments. This allows an attacker to run arbitrary operating system commands with the privileges of the NoteGen process, providing direct remote code execution when a script is executed in the webview, such as through a XSS flaw.

All releases of the NoteGen desktop application by codexu that precede 0.32.0 are affected. The issue is tied to the default Tauri capabilities that grant shell:allow-execute for bash, python, and python3. Installations using older builds that retain these defaults remain vulnerable until patched.

The CVSS score of 8.3 reflects a high impact vulnerability. The EPSS score is less than 1% and the vulnerability is not listed in the CISA KEV catalog, indicating a low observed exploitation probability. Nevertheless, the vulnerability can be triggered by any user who can execute a script in the webview, for example via an XSS within the application’s own code. Once exploited, the attacker can perform arbitrary actions on the user’s machine, compromising confidentiality, integrity, and availability.