Skip to content
OpenAdvisories

Product · jgraph

drawio-desktop

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-119333

    draw.io Desktop allows Windows executable search-path hijacking

    draw.io Desktop is the official Electron build of draw.io. Prior to 31.5.2, the Windows application launched powershell and attrib by bare executable name from src/main/electron.js. When draw.io Desktop was not already running, opening a diagram from File Exp…

    jgraph drawio-desktop