Tauri

Products

Exploited and recent CVEs

• CVE-2026-95627 High 7.7 Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursion 0.3%
• CVE-2026-95626 High 8.3 Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains 0.5%
• CVE-2026-95625 Medium 5.9 Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade 0.2%
• CVE-2026-95624 Medium 6.8 Tauri framework v2 malicious downgrade via allow_downgrades from frontend code 0.4%
• CVE-2026-95623 Medium 5.6 Tauri framework v2 SSRF Protection Bypass via HTTP Redirects 0.2%