CVE-2026-95626

Name of the Vulnerable Software and Affected Versions Tauri (affected versions not specified)

Description The Content Security Policy (CSP) hardening mechanism, which uses a random nonce to restrict script execution, is ineffective if the application includes data: or blob: in its script-src directive. According to the CSP Level 3 specification, these scheme sources remain active regardless of the presence of a nonce, which allows for arbitrary script execution without requiring knowledge of the nonce.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.