CVE-2026-17496Disclosure(notegen / notegen)

MEDIUMCVSS 8.1 · HIGH

Exploitation observed; activity peaked at 3 mentions and remains active

Immediate actions

Patch notegen notegen systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt (for example a malicious skill REFERENCE.md that instructs the model to emit HTML) can cause the model response to include executable markup such as an img onerror handler. When the user views the chat response, that markup runs as JavaScript in the privileged Tauri webview, enabling arbitrary script execution in the application context (cross-site scripting).

notegen CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/codexu/note-gen/commit/ae3ba948c41d8a74b4a20f4c6f26fcdda2002298

Other references

Weakness type (CWE)

CWE-79

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

notegen

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
Peaked 1d ago at 3 mentions (2026-07-26); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

notegen

Products

notegen

Deep dive

Activity timeline4 mentions / 2d

Signal classification3 categories

Disclosure

250.0%

Active Exploitation

125.0%

Patch

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-26	3	Active Exploitation1Disclosure2
2026-07-27	1	Patch1

Full discourse4 posts

CVE@CVEnew91d
Disclosure
CVE-2026-17496 NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-pre… https://www.cve.org/CVERecord?id=CVE-2026-17496
Post summary
The post discloses that NoteGen before 0.32.0 renders AI chat responses with markdown‑it configured html:true, injecting the result into the DOM via dangerouslySetInnerHTML, leading to a DOM‑based XSS flaw.
01000760
57.8K followersView on X
Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters91d
Patch
#CVE-2026-17496 - Stored #XSS in NoteGen. AI chat renders #HTML unsafely via dangerouslySetInnerHTML. #CVSS 8.1. No patch yet—restrict model prompts immediately. #CVEAlert #cybersecuritynews #cybersecurity #infosec #NoteGen https://www.valtersit.com/cve/CVE-2026-17496/
Post summary
The note details a stored XSS flaw (CVE‑2026‑17496) in NoteGen, highlights the lack of a vendor patch, and advises temporarily mitigating the issue by restricting model prompts.
0000050
993 followersView on X
VulDB 🛡@vuldb91d
Active Exploitation
It is possible to see elevated activities targeting codexu NoteGen (CVE-2026-17496) https://vuldb.com/vuln/383327/cti
Post summary
The post indicates that elevated, likely active, exploitation activity is being observed against the NoteGen software via CVE‑2026‑17496, though no specific technical or patch details are provided.
00000106
2.3K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds92d
Disclosure
CVE-2026-17496 Cross-Site Scripting via Unsanitized Markdown Rendering in NoteGen Before 0.32.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-17496
Post summary
A CVE‑2026‑17496 vulnerability, a cross‑site scripting flaw in NoteGen <0.32.0 caused by unsanitized Markdown rendering, has been disclosed with basic details and a link to a vulnerability database.
00000133
4.1K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	notegen	notegen	-	-	-

Explore more

Back to dashboard notegen CVEs notegen vulnerabilities

What researchers are saying

CVE-2026-17496

Hugo | DevOps | Cybersecurity 🇱🇻[verified]@HugoValtersPatch

The note details a stored XSS flaw (CVE‑2026‑17496) in NoteGen, highlights the lack of a vendor patch, and advises temporarily mitigating the issue by restricting model prompts.

CVE@CVEnewDisclosure

The post discloses that NoteGen before 0.32.0 renders AI chat responses with markdown‑it configured html:true, injecting the result into the DOM via dangerouslySetInnerHTML, leading to a DOM‑based XSS flaw.

VulDB 🛡@vuldbActive Exploitation

The post indicates that elevated, likely active, exploitation activity is being observed against the NoteGen software via CVE‑2026‑17496, though no specific technical or patch details are provided.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A CVE‑2026‑17496 vulnerability, a cross‑site scripting flaw in NoteGen <0.32.0 caused by unsanitized Markdown rendering, has been disclosed with basic details and a link to a vulnerability database.