CVE-2026-95627: Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursion
When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no indication that recursive access was granted, and the expanded scope cannot be revoked for the lifetime of the application.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Stop taking the recursion flag from the caller. Grant only the selected file, or only the selected folder without descendants; applications that genuinely need recursive access should request it from their own Rust code, where the frontend cannot reach it.
Tauri framework v2 Dialog plugin recursion flag = disabled for frontend callers
Event History
Frequently Asked Questions
Which applications are exposed to this issue?
Tauri applications that use the Dialog plugin’s file or folder picker are exposed if an attacker can obtain JavaScript execution through XSS.
What does an attacker need to exploit it?
The attacker needs JavaScript execution in the application and must induce a user to make a single click in a normal-looking operating-system file dialog. Exploitation is rated as network-accessible, requires high attack complexity, low privileges, and user interaction.
What access can be obtained after exploitation?
The attacker can cause filesystem scope expansion to be recursive, granting read and write access across the selected directory tree. The user is not shown that recursive access was granted.
Can the expanded filesystem access be removed during the affected application session?
No. Once expanded, the scope cannot be revoked for the lifetime of the application.