CVE Intelligence

Xpf0000 FlyEnv vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Xpf0000 FlyEnv: 1 record(s), with affected versions and fixes.

CVE-2026-69116 Medium · 6.1 CWE-79 Aug 10, 2026
FlyEnv < 4.18.0 Cross-Site Scripting via v-html
FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives. Attackers can inject malicious scripts through markdown sources or chat messages that execute in the Electron renderer process with access to Node.js APIs and the filesystem.