Description

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.4, 40.8.4, and 41.0.0, the nodeIntegrationInWorker webPreference was not correctly scoped in all configurations. In certain process-sharing scenarios, workers spawned in frames configured with nodeIntegrationInWorker: false could still receive Node.js integration. Apps are only affected if they enable nodeIntegrationInWorker. Apps that do not use nodeIntegrationInWorker are not affected. This issue has been patched in versions 38.8.6, 39.8.4, 40.8.4, and 41.0.0.

INFO

Published Date :

2026-04-03T23:55:20.950Z

Last Modified :

2026-04-08T03:55:39.764Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2026-34775 vulnerability.

Vendors Products
Electron
  • Electron
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-34775.

URL Resource
https://github.com/electron/electron/security/advisories/GHSA-xwr5-m59h-vwqr cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-34775 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-34775 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact