CVE-2026-114606 | JGraph drawio-desktop up to 31.4.3 IPC information disclosure (EUVD-2026-108231)

October 22, 2026 Yanac

A vulnerability classified as problematic was found in JGraph drawio-desktop up to 31.4.3. This affects the function readFile/getFileDrafts/getBkpFile/fileStat/isFileWritable/checkFileExists/watchFile of the component IPC Handler. The manipulation results in information disclosure.

This vulnerability is cataloged as CVE-2026-114606. The attack must be initiated from a local position. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More