CVE-2026-115904 | Topluyo Desktop up to 2026.9.2409 External Link utils.js openExternalLinks os command injection

October 28, 2026 Yanac

A vulnerability marked as critical has been reported in Topluyo Desktop up to 2026.9.2409. Affected by this vulnerability is the function openExternalLinks of the file utils.js of the component External Link Handler. Performing a manipulation results in os command injection.

This vulnerability is reported as CVE-2026-115904. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More