CVE-2026-70603 | Electron up to 39.8.5/40.8.x/41.1.0/42.0.0-beta.0 Shell shell.openPath input validation

August 5, 2026 Yanac

A vulnerability was found in Electron up to 39.8.5/40.8.x/41.1.0/42.0.0-beta.0. It has been rated as critical. Impacted is the function shell.openPath of the component Shell. This manipulation causes improper input validation.

This vulnerability is handled as CVE-2026-70603. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More