Skip to content
Threat Feed
Subscribe

Vendor

Electron Builder Project

1 brief RSS
high advisory

Electron AppImage Vulnerability Allows Arbitrary Code Execution via Path Hijacking (CVE-2026-54672)

A high-severity vulnerability (CVE-2026-54672) in the `app-builder-lib` component of Electron Builder allows an attacker to achieve arbitrary code execution by placing a malicious shared library in the current working directory when a vulnerable AppImage is executed, due to an uncontrolled search path element in the `LD_LIBRARY_PATH` environment variable.

app-builder-lib +1 electron appimage supply-chain path-hijacking linux
1t 2c