CVE-2026-9101

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description Prototype pollution occurs within the CSV parsing logic during the import process. This issue allows untrusted file paths to be passed to the shell.openExternal() function. When combined with specific user behavior, this can result in one-click command execution. Prototype pollution is a vulnerability where an attacker manipulates the prototype of a JavaScript object, potentially altering the behavior of other objects in the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.