Summary
Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions
Advisory details
Impact
Windows opened from a sandboxed top-level document did not inherit that document's HTML sandbox restrictions, so content that was meant to run sandboxed could open a window with the app's full origin. GHSA-hq2x-r82h-9wj4 covers the same issue for sandboxed iframes.
Apps are only affected if they render untrusted content in a sandboxed top-level document that allows popups. Apps that deny popups from untrusted content with setWindowOpenHandler are not affected.
Workarounds
Return { action: 'deny' } from setWindowOpenHandler for windows opened by untrusted content.
Fixed Versions
44.0.0-beta.543.4.142.9.241.10.6
For more information
If you have any questions or comments about this advisory, email us at security@electronjs.org
References
- https://github.com/advisories/GHSA-gr2m-v5gq-v685
- https://github.com/electron/electron/security/advisories/GHSA-gr2m-v5gq-v685
- https://github.com/electron/electron/commit/29fc130569f970e91e355383821a4af0f25724a2
- https://github.com/electron/electron/commit/3ecf3e74f4be6e2360644679b0b4698742be0e1d
- https://github.com/electron/electron/commit/6594d5a5b074cf501da084dc7908d3df0d68a886
- https://github.com/electron/electron/commit/e9c4d3cbe912e18d7c63af78e63e98ae7a48cd3a
- https://github.com/electron/electron/releases/tag/v41.10.6
- https://github.com/electron/electron/releases/tag/v42.9.2
Related vulnerabilities
All Supply chain →- HIGHCVE-2026-96627
Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)
- CRITICALCVE-2026-94603
Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation
- HIGHCVE-2026-84318
Nginx UI: MCP `nginx_config_add` Bypasses Directive Validation — Authenticated RCE
- HIGHCVE-2026-84317
Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)
- HIGHCVE-2026-84319
Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context
- HIGHCVE-2026-61434
PraisonAI: Shell command allowlist bypass via find -exec built-in action