Description
Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation.
High · 7.1
CVE-2025-67230
EUVD-2026-4278GHSA-w3pm-8qj7-7fq4
Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to…
Published Jan 23, 2026 · Updated Jan 23, 2026 · Assigned by mitre