Tauri Plugin Dialog
Monthly
Recursive filesystem scope escalation in the Tauri dialog plugin (tauri-plugin-dialog) lets an attacker who already holds JavaScript execution inside a Tauri app's webview hijack a single, normal-looking OS file or folder picker dialog and silently widen the granted filesystem scope to the entire selected directory tree, producing persistent read/write access with no user-visible indication and no way to revoke it for the application's lifetime. The flaw affects any Tauri desktop application that uses the plugin's file or folder picker (CPE cpe:2.3:a:tauri:tauri-plugin-dialog, all versions) and is rated 7.7; it does not create the underlying injection, so exploitation requires the combination of an existing XSS/javascript-execution foothold and one user click on the dialog. Exploitation status: no public exploit identified at time of analysis, no CISA KEV listing, and no EPSS score supplied with the source data.
Recursive filesystem scope escalation in the Tauri dialog plugin (tauri-plugin-dialog) lets an attacker who already holds JavaScript execution inside a Tauri app's webview hijack a single, normal-looking OS file or folder picker dialog and silently widen the granted filesystem scope to the entire selected directory tree, producing persistent read/write access with no user-visible indication and no way to revoke it for the application's lifetime. The flaw affects any Tauri desktop application that uses the plugin's file or folder picker (CPE cpe:2.3:a:tauri:tauri-plugin-dialog, all versions) and is rated 7.7; it does not create the underlying injection, so exploitation requires the combination of an existing XSS/javascript-execution foothold and one user click on the dialog. Exploitation status: no public exploit identified at time of analysis, no CISA KEV listing, and no EPSS score supplied with the source data.