Skip to content
Threat Feed
Subscribe

Vendor

Topluyo

1 brief RSS
critical advisory

Topluyo Desktop for Linux OS Command Injection (CVE-2026-115904)

Topluyo Desktop for Linux versions prior to 2026.9.2410 are vulnerable to OS Command Injection via the openExternalLinks function in utils.js, allowing unauthenticated attackers to achieve RCE through malicious link-handling.

Topluyo Desktop For Linux rce command-injection linux desktop-app
1r 1t 1c 1i