Tauri vulnerabilities

Newest CVEs

• CVE-2026-95627

  Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursion

  Tauri · tauri-plugin-dialog

  High7.7
• CVE-2026-95626

  Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains

  Tauri · tauri

  High8.3
• CVE-2026-95625

  Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade

  Tauri · tauri-plugin-updater

  Medium5.9
• CVE-2026-95624

  Tauri framework v2 malicious downgrade via allow_downgrades from frontend code

  Tauri · tauri-plugin-updater

  Medium6.8
• CVE-2026-95623

  Tauri framework v2 SSRF Protection Bypass via HTTP Redirects

  Tauri · tauri-plugin-http

  Medium5.6