CVE-2026-70597

Name of the Vulnerable Software and Affected Versions Electron versions prior to 39.8.8 Electron versions prior to 40.9.0 Electron versions prior to 41.2.1 Electron versions prior to 42.0.0-beta.3

Description On macOS, the mechanism used to verify if the framework was launched by a same-signed parent process can be bypassed by a local process. This affects applications that enable fuse-based hardening, which restricts the ELECTRON RUN AS NODE and NODE OPTIONS variables to same-signed parents. A local attacker could exploit this to execute arbitrary code within the signed application, thereby inheriting its TCC (Transparency, Consent, and Control) permissions and keychain access.

Recommendations Update to version 39.8.8 or later. Update to version 40.9.0 or later. Update to version 41.2.1 or later. Update to version 42.0.0-beta.3 or later.