CVE-2026-67173

Name of the Vulnerable Software and Affected Versions Pivotick (affected versions not specified)

Description Insufficient validation of the URL scheme for node imagePath values derived from graph data allows an attacker to supply crafted graph data with a malicious URI. When a victim renders the affected graph, the browser may resolve the URI, initiating unintended requests or invoking scheme-specific handling. This could lead to the disclosure of limited client or network metadata, rendering-based tracking, or attempts to access local and internal resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.