PT-2025-14556 · Tauri · Tauri Shell Plugin

Rigidity · Published 2025-04-02 · Updated 2025-04-05 · CVE-2025-31477

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tauri shell plugin versions prior to 2.2.1

Description The Tauri shell plugin exposes functionality to execute code and open programs on the system. Due to improper validation of allowed protocols, potentially dangerous protocols like file://, smb://, or nfs:// can be opened by the system registered protocol handler. This can be abused to gain remote code execution on the system by passing untrusted user input to the open endpoint. This requires either direct exposure of the endpoint to application users or code execution in the frontend of a Tauri application.

Recommendations Update to version 2.2.1 to fix this issue. As a temporary workaround, consider restricting access to the open endpoint to minimize the risk of exploitation. Avoid passing untrusted user input to the open endpoint until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-03884

CVE-2025-31477

GHSA-C9PR-Q8GX-3MGP

Affected Products

Tauri Shell Plugin

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/31xxx/CVE-2025-31477.json · Exploit
• 🔥 https://github.com/tauri-apps/plugins-workspace/security/advisories/GHSA-c9pr-q8gx-3mgp · Exploit
• https://github.com/tauri-apps/plugins-workspace/commit/9cf0390a52497e273db1a1b613a0e26827aa327c · Patch
• https://bdu.fstec.ru/vul/2025-03884 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-31477 · Security Note
• https://osv.dev/vulnerability/GHSA-c9pr-q8gx-3mgp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-31477 · Vendor Advisory
• https://github.com/tauri-apps/plugins-workspace · Note
• https://t.me/cvedetector/21916 · Telegram Post
• https://twitter.com/SecAideInfo/status/1908462756266721523 · Twitter Post
• https://twitter.com/CVEnew/status/1907551205800489467 · Twitter Post
• https://twitter.com/CCBalert/status/1907802922215227870 · Twitter Post
• https://t.me/cvetracker/20630 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1907602459754697213 · Twitter Post
• https://twitter.com/CveFindCom/status/1907546598189494772 · Twitter Post