EdgeEver Desktop (1.6.26 Through 1.112.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/edgeever-desktop-1.6.26-through-1.112.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 12 Oct 2026 22:42:04 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgRemote Code Execution in EdgeEver Desktop via IPC Handlerhttps://feed.craftedsignal.io/briefs/2026-10-edgeever-rce/Mon, 12 Oct 2026 22:42:04 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-edgeever-rce/EdgeEver Desktop versions 1.92.0 through 1.112.0 contain a remote code execution vulnerability in the desktop:acp-probe IPC handler that allows arbitrary command execution via an insecure probeAcpAdapter function.EdgeEver Desktop versions 1.92.0 through 1.112.0 are vulnerable to remote code execution (RCE) via the desktop:acp-probe inter-process communication (IPC) handler. The vulnerability stems from a failure to perform adequate sender verification in the IPC handler, which subsequently facilitates the execution of a caller-supplied executable path. An attacker who gains control over the renderer process, potentially through stored cross-site scripting (XSS) in components like template-preview or drag-preview, can invoke the probeAcpAdapter function to execute arbitrary local binaries. Successful exploitation allows an attacker to execute code with the full privileges of the user running the EdgeEver Desktop application. This vulnerability is assigned CVE-2026-109556 and represents a significant risk for desktop environments where the application is deployed.

Impact

Successful exploitation allows for arbitrary code execution with the user's permissions. This may lead to full system compromise, data theft, or persistence on the affected host, impacting users of EdgeEver Desktop versions 1.92.0 through 1.112.0 across Windows, macOS, and Linux platforms.

Recommendation

  • Patch EdgeEver Desktop to a version beyond 1.112.0 immediately.
  • Audit applications utilizing Electron or similar frameworks for insecure IPC handler configurations and lack of input validation on executable paths.
  • Monitor for unexpected process spawns originating from the EdgeEver Desktop primary application process.
]]>highadvisoryvulnerabilityweb-applicationdesktop-app