CVE-2026-70601 | Electron up to 39.8.8/40.9.1/41.2.1/42.0.0-beta.4 contextBridge isolation

A vulnerability was found in Electron up to 39.8.8/40.9.1/41.2.1/42.0.0-beta.4. It has been declared as critical. This issue affects some unknown processing of the component contextBridge. The manipulation results in improper isolation or compartmentalization.

This vulnerability is known as CVE-2026-70601. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More