CVE-2026-48192

Name of the Vulnerable Software and Affected Versions Mendix Studio Pro versions 10.11 through 10.23 Mendix Studio Pro versions prior to 10.24.21 Mendix Studio Pro versions 11.0 through 11.5 Mendix Studio Pro versions prior to 11.6.7 Mendix Studio Pro versions 11.7 through 11.11

Description Insufficient validation and sanitization of project files processed during the build pipeline can lead to arbitrary code execution. An attacker can exploit this by tricking a user into opening and running a specially crafted malicious project locally, allowing the execution of code within the context of that user.

Recommendations Update Mendix Studio Pro versions 10.11 through 10.23 to version 10.24.21 or later. Update Mendix Studio Pro versions prior to 10.24.21 to version 10.24.21 or later. Update Mendix Studio Pro versions 11.0 through 11.5 to version 11.6.7 or later. Update Mendix Studio Pro versions prior to 11.6.7 to version 11.6.7 or later. Update Mendix Studio Pro versions 11.7 through 11.11 to a version containing the fix.