Tauri vulnerabilities
We track 3 vulnerabilities in Tauri products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 23, 2026.
Latest Tauri vulnerabilities
- 7.7 High severity
tauri-plugin-dialog: Incorrect Permission Assignment for Critical Resource
When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-loo
- 8.3 High severity
tauri: Improper Neutralization of Input During Web Page Generation
Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero protection when an application includes data: or blob: in its script-src directive. Per the CSP Level 3 specification, these scheme sources rema
- 9.8 Critical severity
The Tauri shell plugin allows access to the system shell.
The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality to execute code and open programs on the system. The open endpoint of this plugin is designed to allow open functionality with the system ope