CVE-2024-52011EPSS p41.0%
CVE-2024-52011CVE-2024-52011
Description
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to version 2.9.0, due to the insufficient sanitization of the `file` argument in the `launchEditor`, an attacker can execute arbitrary commands on Windows by supplying a filename that contains special characters. This issue has been fixed in the `launch-editor` version 2.9.0, corresponding to vite version 5.4.9.
Scoring
| CVSS | 8.3 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L |
| EPSS | 0.51% probability of exploitation · percentile 41.0% · 2026-08-03T12:00:16Z |
| Last modified | 2026-07-21 |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.