CVE-2026-34157

Wails is a framework for building desktop applications using Go and web technologies.

Wails is a framework for building desktop applications using Go and web technologies. From 2.0.0 until 2.13.0, BindingsAllowedOrigins in v2/internal/frontend/originvalidator/originValidator.go passes wildcard patterns to wildcardPatternToRegex, which expands every asterisk to an unrestricted regular-expression match. When an application configures a trailing or partial-label wildcard immediately after an allowed domain, an attacker-controlled lookalike origin can match the…

5. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-34157