CVE-2026-57567

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience.

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. In affected desktop Tauri builds prior to 0.11.10, the apps/readest-app/src-tauri/src/transfer_file.rs commands download_file and upload_file accepted a webview-controlled file_path and passed it to File::create or File::open without checking the Tauri filesystem scope, rejecting absolute paths, or blocking parent-directory traversal. The commands…

4. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-57567