CVE WATCH / VULNERABILITY DETAIL
CVE-2026-119333
HIGHCVSS 7.8NVD feed
Published 30 October 2026 · tracked since 31 October 2026
Description
draw.io Desktop is the official Electron build of draw.io. Prior to 31.5.2, the Windows application launched powershell and attrib by bare executable name from src/main/electron.js. When draw.io Desktop was not already running, opening a diagram from File Explorer made the diagram directory the curr
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog