CyberRota Analysis
AI-GeneratedThe vulnerability affects NoteGen versions prior to 0.32.0, where AI chat responses are rendered without proper HTML sanitization, allowing attacker-controlled content to be injected into the DOM. This flaw can lead to cross-site scripting (XSS) attacks, enabling arbitrary script execution within the application's context. Organizations using NoteGen should prioritize patching this vulnerability to mitigate the risk of exploitation and protect their users.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt (for example a malicious skill REFERENCE.md that instructs the model to emit HTML) can cause the model response to include executable markup such as an img onerror handler. When the user views the chat response, that markup runs as JavaScript in the privileged Tauri webview, enabling arbitrary script execution in the application context (cross-site scripting).