Builder vulnerabilities

2 known vulnerabilities in Builder from ToDesktop. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Builder: Incorrect Default Permissions

  CVE-2025-67230Jan 23, 2026ToDesktop

  Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation.

• 9.8 Critical severity

  Builder: Improper Certificate Validation

  CVE-2025-67229Jan 23, 2026ToDesktop

  An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by exploiting insufficient certificate validation.