CVE-2026-47899
CVE-2026-47899
The Electron preload script in Logseq exposes an API method that allows the renderer process to invoke IPC handlers without proper path validation. An attacker with JavaScript execution in the renderer (e.g. via XSS or a malicious plugin)…
EPSS: 0.001 (3.5th percentile) — read the EPSS interpretation.
Weakness classification (CWE)
References
- cvd@cert.pl (third-party-advisory)
- cvd@cert.pl (product)