Skip to content
OpenAdvisories

Product · Tauri

tauri-plugin-dialog

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-95627

    Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursion

    When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-lo…

    Tauri tauri-plugin-dialog