CVE-2026-42184

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-42184
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42184.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-42184
Aliases
Published
2026-05-27T14:29:53.825Z
Modified
2026-07-15T01:49:12.035267700Z
Severity
  • 6.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
Tauri: Origin Confusion Allows Remote Pages to Invoke Local-Only IPC Commands
Details

Tauri is a framework for building binaries for all major desktop platforms. From 2.0 to 2.11.0, a flaw in Tauri's islocalurl() function causes it to incorrectly classify remote URLs as trusted local origins on Windows and Android. On these systems, Tauri maps custom URI scheme protocols to http://<scheme>.localhost/ because those platforms' WebView implementations cannot serve custom URI schemes directly. The issue is that Tauri's check to see if the origin is local, only checks the first subdomain of the URL. An attacker can abuse this by hosting a page on a domain whose subdomain matches the custom scheme of the application. This vulnerability is fixed in 2.10.3.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-918"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42184.json"
}
References

Affected packages

Git / github.com/tauri-apps/tauri

Affected ranges

Type
GIT
Repo
https://github.com/tauri-apps/tauri
Events
Introduced
dcc62e6fc4b5baf5c025fd9d4b297a86c3a37798
Fixed
e5ae5b93cdd310045191cc0526f253140ad64b87
Database specific 
{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "cpe": "cpe:2.3:a:tauri:tauri:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.0"
        },
        {
            "fixed": "2.11.1"
        },
        {
            "introduced": "2.0.0"
        },
        {
            "fixed": "2.10.3"
        }
    ]
}

Affected versions

@tauri-apps/api-v2.*
@tauri-apps/api-v2.0.0
@tauri-apps/api-v2.0.0-rc.2
@tauri-apps/api-v2.0.0-rc.3
@tauri-apps/api-v2.0.0-rc.4
@tauri-apps/api-v2.0.0-rc.5
@tauri-apps/api-v2.0.0-rc.6
@tauri-apps/api-v2.0.1
@tauri-apps/api-v2.0.2
@tauri-apps/api-v2.0.3
@tauri-apps/api-v2.1.0
@tauri-apps/api-v2.1.1
@tauri-apps/api-v2.10.1
@tauri-apps/api-v2.11.0
@tauri-apps/api-v2.2.0
@tauri-apps/api-v2.3.0
@tauri-apps/api-v2.4.0
@tauri-apps/api-v2.4.1
@tauri-apps/api-v2.5.0
@tauri-apps/api-v2.6.0
@tauri-apps/api-v2.7.0
@tauri-apps/api-v2.8.0
@tauri-apps/api-v2.9.0
@tauri-apps/api-v2.9.1
@tauri-apps/cli-v2.*
@tauri-apps/cli-v2.0.0
@tauri-apps/cli-v2.0.0-rc.10
@tauri-apps/cli-v2.0.0-rc.11
@tauri-apps/cli-v2.0.0-rc.12
@tauri-apps/cli-v2.0.0-rc.13
@tauri-apps/cli-v2.0.0-rc.14
@tauri-apps/cli-v2.0.0-rc.15
@tauri-apps/cli-v2.0.0-rc.16
@tauri-apps/cli-v2.0.0-rc.17
@tauri-apps/cli-v2.0.0-rc.18
@tauri-apps/cli-v2.0.0-rc.4
@tauri-apps/cli-v2.0.0-rc.5
@tauri-apps/cli-v2.0.0-rc.6
@tauri-apps/cli-v2.0.0-rc.7
@tauri-apps/cli-v2.0.0-rc.8
@tauri-apps/cli-v2.0.0-rc.9
@tauri-apps/cli-v2.0.1
@tauri-apps/cli-v2.0.2
@tauri-apps/cli-v2.0.3
@tauri-apps/cli-v2.0.4
@tauri-apps/cli-v2.1.0
@tauri-apps/cli-v2.10.0
@tauri-apps/cli-v2.10.1
@tauri-apps/cli-v2.11.0
@tauri-apps/cli-v2.2.0
@tauri-apps/cli-v2.2.1
@tauri-apps/cli-v2.2.2
@tauri-apps/cli-v2.2.3
@tauri-apps/cli-v2.2.4
@tauri-apps/cli-v2.2.5
@tauri-apps/cli-v2.2.6
@tauri-apps/cli-v2.2.7
@tauri-apps/cli-v2.3.0
@tauri-apps/cli-v2.3.1
@tauri-apps/cli-v2.4.0
@tauri-apps/cli-v2.4.1
@tauri-apps/cli-v2.5.0
@tauri-apps/cli-v2.6.0
@tauri-apps/cli-v2.6.1
@tauri-apps/cli-v2.6.2
@tauri-apps/cli-v2.6.3
@tauri-apps/cli-v2.7.0
@tauri-apps/cli-v2.7.1
@tauri-apps/cli-v2.8.0
@tauri-apps/cli-v2.8.1
@tauri-apps/cli-v2.8.2
@tauri-apps/cli-v2.8.3
@tauri-apps/cli-v2.8.4
@tauri-apps/cli-v2.9.0
@tauri-apps/cli-v2.9.1
@tauri-apps/cli-v2.9.2
@tauri-apps/cli-v2.9.3
@tauri-apps/cli-v2.9.4
@tauri-apps/cli-v2.9.5
@tauri-apps/cli-v2.9.6
Other
tauri-build-v2
tauri-bundler-v2
tauri-cli-v2
tauri-codegen-v2
tauri-macos-sign-v0
tauri-macros-v2
tauri-plugin-v2
tauri-runtime-v2
tauri-runtime-wry-v2
tauri-v2
tauri-build-v2.*
tauri-build-v2.0
tauri-build-v2.0.0
tauri-build-v2.0.0-rc.10
tauri-build-v2.0.0-rc.11
tauri-build-v2.0.0-rc.12
tauri-build-v2.0.0-rc.13
tauri-build-v2.0.0-rc.3
tauri-build-v2.0.0-rc.4
tauri-build-v2.0.0-rc.5
tauri-build-v2.0.0-rc.6
tauri-build-v2.0.0-rc.7
tauri-build-v2.0.0-rc.8
tauri-build-v2.0.0-rc.9
tauri-build-v2.0.1
tauri-build-v2.0.2
tauri-build-v2.0.3
tauri-build-v2.0.4
tauri-build-v2.0.5
tauri-build-v2.0.6
tauri-build-v2.1.0
tauri-build-v2.1.1
tauri-build-v2.2.0
tauri-build-v2.3.0
tauri-build-v2.3.1
tauri-build-v2.4.0
tauri-build-v2.4.1
tauri-build-v2.5.0
tauri-build-v2.5.1
tauri-build-v2.5.2
tauri-build-v2.5.3
tauri-build-v2.5.4
tauri-build-v2.5.5
tauri-build-v2.5.6
tauri-build-v2.6.0
tauri-bundler-v2.*
tauri-bundler-v2.0
tauri-bundler-v2.0.0
tauri-bundler-v2.0.1
tauri-bundler-v2.0.1-rc.10
tauri-bundler-v2.0.1-rc.11
tauri-bundler-v2.0.1-rc.12
tauri-bundler-v2.0.1-rc.13
tauri-bundler-v2.0.1-rc.14
tauri-bundler-v2.0.1-rc.15
tauri-bundler-v2.0.1-rc.2
tauri-bundler-v2.0.1-rc.3
tauri-bundler-v2.0.1-rc.4
tauri-bundler-v2.0.1-rc.5
tauri-bundler-v2.0.1-rc.6
tauri-bundler-v2.0.1-rc.7
tauri-bundler-v2.0.1-rc.8
tauri-bundler-v2.0.1-rc.9
tauri-bundler-v2.0.2
tauri-bundler-v2.0.3
tauri-bundler-v2.0.4
tauri-bundler-v2.1.0
tauri-bundler-v2.2.0
tauri-bundler-v2.2.1
tauri-bundler-v2.2.2
tauri-bundler-v2.2.3
tauri-bundler-v2.2.4
tauri-bundler-v2.3.0
tauri-bundler-v2.3.1
tauri-bundler-v2.4.0
tauri-bundler-v2.5.0
tauri-bundler-v2.5.1
tauri-bundler-v2.5.2
tauri-bundler-v2.6.0
tauri-bundler-v2.6.1
tauri-bundler-v2.7.0
tauri-bundler-v2.7.1
tauri-bundler-v2.7.2
tauri-bundler-v2.7.3
tauri-bundler-v2.7.4
tauri-bundler-v2.7.5
tauri-bundler-v2.8.0
tauri-bundler-v2.8.1
tauri-bundler-v2.9.0
tauri-cli-v2.*
tauri-cli-v2.0
tauri-cli-v2.0.0
tauri-cli-v2.0.0-rc.10
tauri-cli-v2.0.0-rc.12
tauri-cli-v2.0.0-rc.13
tauri-cli-v2.0.0-rc.14
tauri-cli-v2.0.0-rc.15
tauri-cli-v2.0.0-rc.16
tauri-cli-v2.0.0-rc.17
tauri-cli-v2.0.0-rc.18
tauri-cli-v2.0.0-rc.4
tauri-cli-v2.0.0-rc.5
tauri-cli-v2.0.0-rc.6
tauri-cli-v2.0.0-rc.7
tauri-cli-v2.0.0-rc.8
tauri-cli-v2.0.0-rc.9
tauri-cli-v2.0.1
tauri-cli-v2.0.2
tauri-cli-v2.0.3
tauri-cli-v2.0.4
tauri-cli-v2.0.5
tauri-cli-v2.1.0
tauri-cli-v2.10.0
tauri-cli-v2.10.1
tauri-cli-v2.11.0
tauri-cli-v2.2.0
tauri-cli-v2.2.1
tauri-cli-v2.2.2
tauri-cli-v2.2.3
tauri-cli-v2.2.4
tauri-cli-v2.2.5
tauri-cli-v2.2.6
tauri-cli-v2.2.7
tauri-cli-v2.3.0
tauri-cli-v2.3.1
tauri-cli-v2.4.0
tauri-cli-v2.4.1
tauri-cli-v2.5.0
tauri-cli-v2.6.0
tauri-cli-v2.6.1
tauri-cli-v2.6.2
tauri-cli-v2.6.3
tauri-cli-v2.7.0
tauri-cli-v2.7.1
tauri-cli-v2.8.0
tauri-cli-v2.8.1
tauri-cli-v2.8.2
tauri-cli-v2.8.3
tauri-cli-v2.8.4
tauri-cli-v2.9.0
tauri-cli-v2.9.1
tauri-cli-v2.9.2
tauri-cli-v2.9.3
tauri-cli-v2.9.4
tauri-cli-v2.9.5
tauri-cli-v2.9.6
tauri-codegen-v2.*
tauri-codegen-v2.0
tauri-codegen-v2.0.0
tauri-codegen-v2.0.0-rc.10
tauri-codegen-v2.0.0-rc.11
tauri-codegen-v2.0.0-rc.12
tauri-codegen-v2.0.0-rc.13
tauri-codegen-v2.0.0-rc.3
tauri-codegen-v2.0.0-rc.4
tauri-codegen-v2.0.0-rc.5
tauri-codegen-v2.0.0-rc.6
tauri-codegen-v2.0.0-rc.7
tauri-codegen-v2.0.0-rc.8
tauri-codegen-v2.0.0-rc.9
tauri-codegen-v2.0.1
tauri-codegen-v2.0.2
tauri-codegen-v2.0.3
tauri-codegen-v2.0.4
tauri-codegen-v2.0.5
tauri-codegen-v2.1.0
tauri-codegen-v2.1.1
tauri-codegen-v2.2.0
tauri-codegen-v2.3.0
tauri-codegen-v2.3.1
tauri-codegen-v2.4.0
tauri-codegen-v2.5.0
tauri-codegen-v2.5.1
tauri-codegen-v2.5.2
tauri-codegen-v2.5.3
tauri-codegen-v2.5.4
tauri-codegen-v2.5.5
tauri-codegen-v2.6.0
tauri-driver-v0.*
tauri-driver-v0.1.5
tauri-driver-v2.*
tauri-driver-v2.0.0
tauri-driver-v2.0.1
tauri-driver-v2.0.2
tauri-driver-v2.0.3
tauri-driver-v2.0.4
tauri-driver-v2.0.5
tauri-macos-sign-v0.*
tauri-macos-sign-v0.1
tauri-macos-sign-v0.1.1-rc.0
tauri-macos-sign-v0.1.1-rc.1
tauri-macos-sign-v2.*
tauri-macos-sign-v2.0.0
tauri-macos-sign-v2.0.1
tauri-macos-sign-v2.1.0
tauri-macos-sign-v2.2.0
tauri-macos-sign-v2.3.0
tauri-macos-sign-v2.3.1
tauri-macos-sign-v2.3.2
tauri-macos-sign-v2.3.3
tauri-macos-sign-v2.3.4
tauri-macros-v2.*
tauri-macros-v2.0
tauri-macros-v2.0.0
tauri-macros-v2.0.0-rc.10
tauri-macros-v2.0.0-rc.11
tauri-macros-v2.0.0-rc.12
tauri-macros-v2.0.0-rc.3
tauri-macros-v2.0.0-rc.4
tauri-macros-v2.0.0-rc.5
tauri-macros-v2.0.0-rc.6
tauri-macros-v2.0.0-rc.7
tauri-macros-v2.0.0-rc.8
tauri-macros-v2.0.0-rc.9
tauri-macros-v2.0.1
tauri-macros-v2.0.2
tauri-macros-v2.0.3
tauri-macros-v2.0.4
tauri-macros-v2.0.5
tauri-macros-v2.1.0
tauri-macros-v2.1.1
tauri-macros-v2.2.0
tauri-macros-v2.3.0
tauri-macros-v2.3.1
tauri-macros-v2.3.2
tauri-macros-v2.4.0
tauri-macros-v2.5.0
tauri-macros-v2.5.1
tauri-macros-v2.5.2
tauri-macros-v2.5.3
tauri-macros-v2.5.4
tauri-macros-v2.5.5
tauri-macros-v2.6.0
tauri-plugin-v2.*
tauri-plugin-v2.0
tauri-plugin-v2.0.0
tauri-plugin-v2.0.0-rc.10
tauri-plugin-v2.0.0-rc.11
tauri-plugin-v2.0.0-rc.12
tauri-plugin-v2.0.0-rc.13
tauri-plugin-v2.0.0-rc.3
tauri-plugin-v2.0.0-rc.4
tauri-plugin-v2.0.0-rc.5
tauri-plugin-v2.0.0-rc.6
tauri-plugin-v2.0.0-rc.7
tauri-plugin-v2.0.0-rc.8
tauri-plugin-v2.0.0-rc.9
tauri-plugin-v2.0.1
tauri-plugin-v2.0.2
tauri-plugin-v2.0.3
tauri-plugin-v2.0.4
tauri-plugin-v2.0.5
tauri-plugin-v2.1.0
tauri-plugin-v2.1.1
tauri-plugin-v2.2.0
tauri-plugin-v2.3.0
tauri-plugin-v2.3.1
tauri-plugin-v2.4.0
tauri-plugin-v2.5.0
tauri-plugin-v2.5.1
tauri-plugin-v2.5.2
tauri-plugin-v2.5.3
tauri-plugin-v2.5.4
tauri-plugin-v2.6.0
tauri-runtime-v2.*
tauri-runtime-v2.0
tauri-runtime-v2.0.0
tauri-runtime-v2.0.0-rc.10
tauri-runtime-v2.0.0-rc.11
tauri-runtime-v2.0.0-rc.12
tauri-runtime-v2.0.0-rc.13
tauri-runtime-v2.0.0-rc.3
tauri-runtime-v2.0.0-rc.4
tauri-runtime-v2.0.0-rc.5
tauri-runtime-v2.0.0-rc.6
tauri-runtime-v2.0.0-rc.7
tauri-runtime-v2.0.0-rc.8
tauri-runtime-v2.0.0-rc.9
tauri-runtime-v2.0.1
tauri-runtime-v2.1.0
tauri-runtime-v2.1.1
tauri-runtime-v2.10.0
tauri-runtime-v2.10.1
tauri-runtime-v2.11.0
tauri-runtime-v2.2.0
tauri-runtime-v2.3.0
tauri-runtime-v2.4.0
tauri-runtime-v2.5.0
tauri-runtime-v2.5.1
tauri-runtime-v2.6.0
tauri-runtime-v2.7.0
tauri-runtime-v2.7.1
tauri-runtime-v2.8.0
tauri-runtime-v2.9.0
tauri-runtime-v2.9.1
tauri-runtime-v2.9.2
tauri-runtime-wry-v2.*
tauri-runtime-wry-v2.0
tauri-runtime-wry-v2.0.0
tauri-runtime-wry-v2.0.0-rc.10
tauri-runtime-wry-v2.0.0-rc.11
tauri-runtime-wry-v2.0.0-rc.12
tauri-runtime-wry-v2.0.0-rc.13
tauri-runtime-wry-v2.0.0-rc.14
tauri-runtime-wry-v2.0.0-rc.3
tauri-runtime-wry-v2.0.0-rc.4
tauri-runtime-wry-v2.0.0-rc.5
tauri-runtime-wry-v2.0.0-rc.6
tauri-runtime-wry-v2.0.0-rc.7
tauri-runtime-wry-v2.0.0-rc.8
tauri-runtime-wry-v2.0.0-rc.9
tauri-runtime-wry-v2.0.1
tauri-runtime-wry-v2.1.0
tauri-runtime-wry-v2.1.1
tauri-runtime-wry-v2.1.2
tauri-runtime-wry-v2.10.0
tauri-runtime-wry-v2.10.1
tauri-runtime-wry-v2.11.0
tauri-runtime-wry-v2.2.0
tauri-runtime-wry-v2.3.0
tauri-runtime-wry-v2.4.0
tauri-runtime-wry-v2.4.1
tauri-runtime-wry-v2.5.0
tauri-runtime-wry-v2.5.1
tauri-runtime-wry-v2.6.0
tauri-runtime-wry-v2.7.0
tauri-runtime-wry-v2.7.1
tauri-runtime-wry-v2.7.2
tauri-runtime-wry-v2.8.0
tauri-runtime-wry-v2.8.1
tauri-runtime-wry-v2.9.0
tauri-runtime-wry-v2.9.1
tauri-runtime-wry-v2.9.2
tauri-runtime-wry-v2.9.3
tauri-utils-v2.*
tauri-utils-v2.0.0
tauri-utils-v2.0.0-rc.10
tauri-utils-v2.0.0-rc.11
tauri-utils-v2.0.0-rc.12
tauri-utils-v2.0.0-rc.13
tauri-utils-v2.0.0-rc.4
tauri-utils-v2.0.0-rc.5
tauri-utils-v2.0.0-rc.6
tauri-utils-v2.0.0-rc.7
tauri-utils-v2.0.0-rc.8
tauri-utils-v2.0.0-rc.9
tauri-utils-v2.0.1
tauri-utils-v2.0.2
tauri-utils-v2.1.0
tauri-utils-v2.1.1
tauri-utils-v2.2.0
tauri-utils-v2.3.0
tauri-utils-v2.3.1
tauri-utils-v2.4.0
tauri-utils-v2.5.0
tauri-utils-v2.6.0
tauri-utils-v2.7.0
tauri-utils-v2.8.0
tauri-utils-v2.8.1
tauri-utils-v2.8.2
tauri-utils-v2.8.3
tauri-utils-v2.9.0
tauri-v2.*
tauri-v2.0
tauri-v2.0.0
tauri-v2.0.0-rc.10
tauri-v2.0.0-rc.11
tauri-v2.0.0-rc.12
tauri-v2.0.0-rc.13
tauri-v2.0.0-rc.14
tauri-v2.0.0-rc.15
tauri-v2.0.0-rc.16
tauri-v2.0.0-rc.17
tauri-v2.0.0-rc.3
tauri-v2.0.0-rc.4
tauri-v2.0.0-rc.5
tauri-v2.0.0-rc.6
tauri-v2.0.0-rc.7
tauri-v2.0.0-rc.8
tauri-v2.0.0-rc.9
tauri-v2.0.1
tauri-v2.0.2
tauri-v2.0.3
tauri-v2.0.4
tauri-v2.0.5
tauri-v2.0.6
tauri-v2.1.0
tauri-v2.1.1
tauri-v2.10.0
tauri-v2.10.1
tauri-v2.10.2
tauri-v2.10.3
tauri-v2.11.0
tauri-v2.2.0
tauri-v2.2.1
tauri-v2.2.2
tauri-v2.2.3
tauri-v2.2.4
tauri-v2.2.5
tauri-v2.3.0
tauri-v2.3.1
tauri-v2.4.0
tauri-v2.4.1
tauri-v2.5.0
tauri-v2.5.1
tauri-v2.6.0
tauri-v2.6.1
tauri-v2.6.2
tauri-v2.7.0
tauri-v2.8.0
tauri-v2.8.1
tauri-v2.8.2
tauri-v2.8.3
tauri-v2.8.4
tauri-v2.8.5
tauri-v2.9.0
tauri-v2.9.1
tauri-v2.9.2
tauri-v2.9.3
tauri-v2.9.4
tauri-v2.9.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42184.json"