The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifically, the following insecure settings were observed: RunAsNode is enabled and EnableNodeCliInspectArguments is not disabled. These configurations allow the application to be executed in Node.js mode, enabling attackers to pass arguments that result in arbitrary code execution.
CVSS
No CVSS.
References
Configurations
No configuration.
History
04 Aug 2025, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-08-04 21:15
Updated : 2025-08-05 14:15
NVD link : CVE-2025-51387
Mitre link : CVE-2025-51387
JSON object : View
Products Affected
No product.
CWE
No CWE.