Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-52103 EUVD-2026-66751GHSA-vx25-92gx-4xfv

A zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attack…

Published Aug 26, 2026 · Updated Sep 1, 2026 · Assigned by mitre

Description

A zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the application without user interaction via sending a crafted payload in a text message.

References