---
id: CVE-2026-17497
title: >-
  NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute
  capability for bash, python, and python3 with arbitrary arguments in the
  default desktop capabilities
summary: >-
  NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute
  capability for bash, python, and python3 with arbitrary arguments in the
  default desktop capabilities. JavaScript running in the application webview
  can therefore in…
severity: high
cvss: 8.3
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H'
cwe:
  - CWE-78
  - CWE-276
  - CWE-1249
published: '2026-07-26'
updated: '2026-07-26'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-17497'
references:
  - url: 'https://github.com/codexu/note-gen'
    label: reefs@jfrog.com
  - url: >-
      https://github.com/codexu/note-gen/commit/00064a4a8ec4177d51094ffb3e15bf0758009c1f
    label: reefs@jfrog.com
  - url: 'https://github.com/codexu/note-gen/releases/tag/note-gen-v0.32.0'
    label: reefs@jfrog.com
tags:
  - nvd
ingestedAt: '2026-07-26T16:12:18.663Z'
epss: 0.00749
epssPercentile: 0.52916
---

## Overview

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview (for example via chat XSS), this enables full remote code execution on the user's machine.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.