CVE-2026-102672: electron < 39.8.10, >= 40.0.0-alpha.1, < 41.10.5, >= 42.0.0-alpha.1, < 42.0.0-beta.2

Affected technology

electron · < 39.8.10, >= 40.0.0-alpha.1, < 41.10.5, >= 42.0.0-alpha.1, < 42.0.0-beta.2
electron

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · User interaction required

What an attacker can do

A local attacker can redirect the root-level write so that it overwrites another application's files instead of the application that initiated the update. Vendor/CNA’s CVSS 3.1 assessment (base score 6.7/10) rates confidentiality, integrity and availability impact as high.