CVE-2026-28373

Name of the Vulnerable Software and Affected Versions Stackfield Desktop App versions prior to 1.10.2

Description A path traversal issue exists in the decryption functionality when processing the filePath property. This allows a malicious export to write arbitrary content to any path on the victim's filesystem, which can lead to remote code execution (RCE), a state where an attacker can execute arbitrary commands on the target machine.

Recommendations Update to version 1.10.2 or later.