01 Record
CVE-2026-95624
Tauri framework v2 malicious downgrade via allow_downgrades from frontend code
MediumPUBLISHEDCNA: JFROG
CNA base score6.8 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
02 Description
Tauri framework v2 malicious downgrade via allow_downgrades from frontend code
03 Exploitation and scoring
- Exploitation
- Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.
- SSVC decision
- ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
- AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
- Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.
- EPSS probability
- 0.44% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 38.7% of scored records. A rank, not a probability.
- NVD base score
- 6.8 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
- NVD analysis status
- Deferred. NVD last modified this record on 2026-09-22.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2026-09-22 17:16Z1 MO AGO
- Last updated
- 2026-09-22 19:30Z1 MO AGO
- Reserved
- 2026-09-22
- Assigning CNA
- JFROG
- Record state
- PUBLISHED
- Severity
- Medium (CVSS 6.8)
- CNA CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-284Improper Access ControlPillar
- Data version
- 5.2
- Document digest
- 144e1657ae6a64a6a7e0fbaa1010639439747b474056397bc68cd6ef7948f98c
05 Affected products
VendorProductVersionsPlatforms
06 References
- github.comGHSA-rjc6-5hfg-grp9 (tauri-apps/tauri)https://github.com/tauri-apps/tauri/security/advisories/GHSA-rjc6-5hfg-grp9
- github.comtauri-apps/tauri repositoryhttps://github.com/tauri-apps/tauri
- github.comMove allowDowngrades from the check command to the plugin configurationhttps://github.com/tauri-apps/plugins-workspace/commit/1308bfa399b962b3977c767100a6339d1cbfdd20
- github.comtauri-plugin-updater 2.12.0 release noteshttps://github.com/tauri-apps/plugins-workspace/releases/tag/updater-v2.12.0
07 Remediation
Fixed in tauri-plugin-updater 2.12.0. allowDowngrades was removed from the check command and is now read from the plugin configuration instead, where the frontend cannot reach it, and it defaults to false. An application that provides its own version comparator still takes precedence.