CVE-2026-112944

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative WSL path, launchEditor forwards the path without forcing it to be interpreted as a positional filename. Editor option parsing then treats the attacker-controlled filename as a command-line flag, which can cause unintended file overwrite or arbitrary command execution by the selected editor. The affected editors are Vim and gVim, MacVim, Emacs and Emacsclient, and Notepad++ when a plugin exposes dangerous operations; WSL path conversion keeps Vite and newer middleware callers exposed. This issue is fixed in version 2.14.2.

• CWE-88

• https://github.com/vitejs/launch-editor/commit/f6e6701bb1f16f2dd242b321374f1b6cca6eb6d4
• https://github.com/vitejs/launch-editor/pull/156
• https://github.com/vitejs/launch-editor/releases/tag/v2.14.2
• https://github.com/vitejs/launch-editor/security/advisories/GHSA-r825-w8mm-5pxw

Published

Oct 20, 2026

Last Modified

Oct 20, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-112939filelock is a platform-independent file lock for Python. Fro…4.7
• CVE-2026-11294Inappropriate implementation in Passwords in Google Chrome p…4.3
• CVE-2026-112940filelock is a platform-independent file lock for Python. Fro…7.1
• CVE-2026-112941filelock is a platform-independent file lock for Python. Fro…3.3
• CVE-2026-112942launch-editor allows users to open files with line numbers i…7.5
• CVE-2026-112943launch-editor allows users to open files with line numbers i…6.3
• CVE-2026-112945Vite is a frontend tooling framework for JavaScript. Prior t…2.1
• CVE-2026-112946Vite is a frontend tooling framework for JavaScript. Prior t…6.3
• CVE-2026-112947Vite is a frontend tooling framework for JavaScript. From 8.…6.3
• CVE-2026-112948Vitest is a testing framework powered by Vite. From 5.0.0-be…6.5
• CVE-2026-112949Vitest is a Vite-native testing framework for JavaScript and…4.7
• CVE-2026-11295Inappropriate implementation in WebView in Google Chrome on …8.8