CVE-2026-95626 — Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains

CVE-2026-95626

Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains PUBLISHED

Description (CNA)

Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero protection when an application includes data: or blob: in its script-src directive. Per the CSP Level 3 specification, these scheme sources remain active even when a nonce is present, allowing arbitrary script execution without knowing the nonce.

Affected (CNA)

Vendor / product	Versions
Tauri / tauri	affected 2.0.0 through *

CWE

CWE-79

References

https://github.com/tauri-apps/tauri/security/advisories/GHSA-6vxm-x265-58qf
https://github.com/tauri-apps/tauri

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.