XSS in Netron

CVE-2026-79720

Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.

Vulnerability class: XSS (Cross-Site Scripting)

Affected products

Weakness classification (CWE)

References