Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.5, and 42.0.0-beta.2, Electron applications on macOS that use Squirrel.Mac-based automatic updates are vulnerable to a local race in the privileged ShipIt helper. The helper did not bind the validated update target to one canonical application-bundle path for the full installation, allowing a local attacker to redirect the root-level write so that it overwrites another application's files instead of the application that initiated the update. Applications on other platforms and macOS applications that do not use Squirrel.Mac-based automatic updates are not affected. This issue is fixed in versions 39.8.10, 41.10.5, and 42.0.0-beta.2.
{
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-367"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102672.json"
}{
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "39.8.10"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"introduced": "40.0.0-alpha.1"
},
{
"fixed": "41.10.5"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"introduced": "42.0.0-alpha.1"
},
{
"fixed": "42.0.0-beta.2"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"fixed": "01faabfc250801a980fc94d64608046c67fc1cd9"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "15e2928a5c5f01759107b414010e220d90d59cef"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "a0f9ff4cc0340545008424232d49caadd9c0c767"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "b8f25c4cedb2e0f5f475912b709aba19c57c26be"
}
],
"source": "REFERENCES_COMMIT"
},
{
"original_tag": "v39.8.10",
"range": [
{
"fixed": "d7c42ebd5cd501a0e6d9f009e232369832f92d69"
}
],
"source": "REFERENCES_TAG"
},
{
"original_tag": "v41.10.5",
"range": [
{
"fixed": "5bff19c021dac4fb5d30481ccd6b76ec6e198b0d"
}
],
"source": "REFERENCES_TAG"
},
{
"original_tag": "v42.0.0-beta.2",
"range": [
{
"fixed": "b0b7a70f695f54b5cb2c0f0d7d28047979f1dba6"
}
],
"source": "REFERENCES_TAG"
}
]
}