CVE-2026-119333 | jgraph drawio-desktop up to 31.5.1 File Launch src/main/electron.js untrusted search path

October 30, 2026 Yanac

A vulnerability marked as critical has been reported in jgraph drawio-desktop up to 31.5.1. The affected element is an unknown function of the file src/main/electron.js of the component File Launch. This manipulation causes untrusted search path.

This vulnerability is handled as CVE-2026-119333. It is possible to launch the attack on the local host. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More