CVE-2025-51387

The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifically, the following insecure settings were observed: RunAsNode is enabled and EnableNodeCliInspectArguments is not disabled. These configurations allow the application to be executed in Node.js mode, enabling attackers to pass arguments that result in arbitrary code execution.
CVSS

No CVSS.

Configurations

No configuration.

History

04 Aug 2025, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-08-04 21:15

Updated : 2025-08-05 14:15


NVD link : CVE-2025-51387

Mitre link : CVE-2025-51387


JSON object : View

Products Affected

No product.

CWE

No CWE.