NoteGen is vulnerable to Arbitrary OS Command Execution via Tauri shell:allow-execute for bash/python

## Summary NoteGen is vulnerable to Arbitrary OS Command Execution via Tauri shell:allow-execute for bash/python ## Component note-gen (NoteGen) ## Affected versions < 0.32.0 ## Description NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview, for example via chat XSS (CVE-2026-17496), this enables full remote code execution on the user's machine. ## PoC
**Step 1 - Obtain JavaScript execution in the NoteGen webview**
Use chat XSS (CVE-2026-17496) or another webview script sink so attacker JavaScript runs inside NoteGen < 0.32.0 on a default installation.
**Step 2 - Invoke the Tauri shell execute API**
From the webview, call: ```javascript window.__TAURI__.core.invoke('plugin:shell|execute', { program: 'bash', args: ['-c', 'open -a Calculator'], options: { cwd: null, env: null, encoding: 'utf-8' } }); ```
**Step 3 - Verify OS command execution**
Expected result: Calculator opens as the NoteGen user, proving arbitrary OS command execution via bash -c. The same path can read local files and exfiltrate them to an attacker-controlled server. ## Vulnerability Mitigations Upgrade to NoteGen 0.32.0 or later. The fix removes shell:allow-execute entries that permitted bash, python, and python3 with attacker-controlled arguments from the default Tauri capabilities, closing the webview-to-OS command execution path. ## References https://github.com/advisories/GHSA-r5ff-hq22-rhgv https://github.com/codexu/note-gen/commit/00064a4a8ec4177d51094ffb3e15bf0758009c1f https://github.com/codexu/note-gen/releases/tag/note-gen-v0.32.0