Toonflow-app CVE-2026-109409

Requires LOCAL access to a host running Toonflow-app version ≤1.1.8 and the ability to control the 'path' argument processed by the Open Folder endpoint in src/routes/setting/fileManagement/openFolder.ts, which feeds child_process.exec without adequate sanitization. Per CVSS PR:L, the actor needs at least low-level privileges/authentication within the application context (not a fully unauthenticated path). Limiting factors: there is no remote/network vector (AV:L), the injected command runs only at the privilege of the local user already running the app (so impact is bounded, VC:L/VI:L/VA:L), the issue is fixed in 2.0.0, and the vendor asserts the affected code paths were removed in the architectural refactor leading to the current 2.0.4 release - meaning current/default installations may not be exposed at all.

This is a low-to-medium real-world priority despite being a command injection flaw (CWE-77). The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L, base 4.8 medium) shows the attack requires LOCAL access and at least low privileges (PR:L), which sharply limits exposure - there is no remote network vector. The E:P (Proof-of-Concept) exploit maturity aligns with the input signal that exploit code is publicly available, but publicly available exploit code exists is NOT the same as active exploitation: this CVE is NOT listed in CISA KEV, so there is no confirmation of in-the-wild use. No EPSS score was provided in the input, so exploitation probability cannot be quantified - a notable missing signal. The low impact ratings (VC:L/VI:L/VA:L) reflect that the injected command executes within the context/privilege of the local user already running the Electron-style desktop app, so the attacker gains little beyond access they largely already possess. Crucially, the vendor DISPUTES applicability: they state the report targets 1.1.8, the current release is 2.0.4 after a substantial architectural refactor, and the vulnerable code paths do not exist in supported releases - this conflicts with treating the issue as a live threat to current deployments and should be verified. Net: a genuine but low-severity local flaw in a niche product, not an emergency.

A local low-privileged user (or a process/script running in that user's context) on a machine running Toonflow-app ≤1.1.8 supplies a crafted value for the 'path' argument handled by the Open Folder endpoint, which is passed unsanitized into child_process.exec. The shell metacharacters in the path are interpreted, executing attacker-chosen commands at the privilege level of the running application. A proof-of-concept exploit is publicly available (referenced via a Google Drive link by VulDB).