CVE-2026-113411 | Nerimity Desktop up to 2.2.2 Window Open src/mainWindow.js shell.openExternal url improper authorization in handler for custom url scheme

A vulnerability, which was classified as critical, was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open Handler. The manipulation of the argument url results in improper authorization in handler for custom url scheme.

This vulnerability is identified as CVE-2026-113411. The attack can be executed remotely. Additionally, an exploit exists.

You should upgrade the affected component.

The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.VulDB Recent EntriesRead More