CVE-2026-17496

NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt (for example a malicious skill REFERENCE.md that instructs the model to emit HTML) can cause the model response to include executable markup such as an img onerror handler. When the user views the chat response, that markup runs as JavaScript in the privileged Tauri webview, enabling arbitrary script execution in the application context (cross-site scripting).

• CWE-79

• https://github.com/codexu/note-genProduct
• https://github.com/codexu/note-gen/commit/ae3ba948c41d8a74b4a20f4c6f26fcdda2002298Patch
• https://github.com/codexu/note-gen/releases/tag/note-gen-v0.32.0Product, Release Notes

Published

Jul 26, 2026

Last Modified

Aug 25, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-17482IBM Documentation Offline 1.0.0 through 1.4.1 could allow a …9.8
• CVE-2026-17483IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a l…3.3
• CVE-2026-17485IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker t…8.2
• CVE-2026-1749There is an Access Control Vulnerability in some HikCentral …6.8
• CVE-2026-17494IBM Power Systems Firmware FW1120.00, and FW1110.00 through …8.2
• CVE-2026-17495moment is a JavaScript date library for parsing, validating,…5.9
• CVE-2026-17497NoteGen before 0.32.0 grants the Tauri shell plugin shell:al…8.3
• CVE-2026-17499IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to…7.8
• CVE-2026-1750The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for W…8.8
• CVE-2026-17500A vulnerability was detected in ggml-org llama.cpp d006858/e…6.9
• CVE-2026-17501A flaw has been found in ggml-org llama.cpp e15efe0. This vu…6.9
• CVE-2026-17502IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker t…7.5