CVE-2026-54672
electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
electron-updater allows for automatic updates for Electron apps. Prior to 26.15.0, AppImage targets built by app-builder-lib could use an empty path component when setting the LD_LIBRARY_PATH environment variable at runtime. This causes the current working directory to be added to the dynamic linker search path, which may allow an attacker to execute arbitrary code by placing a malicious shared library in the directory from which the AppImage is launched. This issue has been fixed in version 26.15.0.
| CWE | CWE-427 |
| Vendor | electron-userland |
| Product | electron-builder |
| Published | Jun 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for electron-userland electron-builder
Be the first to know when new high vulnerabilities affecting electron-userland electron-builder are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
electron-userland / electron-builder
< 26.15.0
electron-userland / app-builder-lib
< 26.15.0