r3ggi/electroniz3r

r3ggi/electroniz3r

Releases0

Stars223

Take over macOS Electron apps' TCC permissions

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-51387 ↗	Aug 4, 2025Monday, 4 August 2025, 21:15	9.8 CRITICAL	—
The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifically, the following insecure settings were observed: RunAsNode is enabled and EnableNodeCliInspectArguments is not disabled. These configurations allow the application to be executed in Node.js mode, enabling attackers to pass arguments that result in arbitrary code execution.
CVE-2024-8258 ↗	Sep 10, 2024Tuesday, 10 September 2024, 09:15	7.8 HIGH	—
Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.
CVE-2023-49314 ↗	Nov 28, 2023Tuesday, 28 November 2023, 15:15	7.8 HIGH	—
Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack.