CVE-2026-57567

Name of the Vulnerable Software and Affected Versions Readest versions prior to 0.11.10

Description In desktop Tauri builds, the download file and upload file commands within the apps/readest-app/src-tauri/src/transfer file.rs file fail to validate the file path variable. The application does not check the Tauri filesystem scope, reject absolute paths, or block parent-directory traversal. Because these commands are registered in the global invoke handler for the main, updater, and reader windows, JavaScript executing in the privileged application origin can read or write files to any path accessible by the process. This could allow an attacker to overwrite trusted startup files or expose sensitive data such as keys, tokens, and application secrets. Exploitation requires JavaScript execution within the privileged origin, which could occur via application XSS or a compromised renderer.

Recommendations Update Readest to version 0.11.10.