{"id":"CVE-2026-34725","summary":"dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration","details":"DbGate is cross-platform database manager. From version 7.0.0 to before version 7.1.5, a stored XSS vulnerability exists in DbGate because attacker-controlled SVG icon strings are rendered as raw HTML without sanitization. In the web UI this allows script execution in another user's browser; in the Electron desktop app this can escalate to local code execution because Electron is configured with nodeIntegration: true and contextIsolation: false. This issue has been patched in version 7.1.5.","aliases":["GHSA-35xm-qvjg-8m42"],"modified":"2026-08-12T03:51:41.598660533Z","published":"2026-04-02T18:02:35.720Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-79","CWE-94"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34725.json"},"references":[{"type":"WEB","url":"https://github.com/dbgate/dbgate/releases/tag/v7.1.5"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34725.json"},{"type":"ADVISORY","url":"https://github.com/dbgate/dbgate/security/advisories/GHSA-35xm-qvjg-8m42"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34725"},{"type":"FIX","url":"https://github.com/dbgate/dbgate/commit/a7d2ed11f3f3d4dfb5d2e4e5467dedafa5fa947e"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/dbgate/dbgate","events":[{"introduced":"35de1f1c4e55ed0b9920b367ef50484fe5361368"},{"fixed":"5b27a241d75174651c7a9eb7d12c6c8884f3778f"}],"database_specific":{"extracted_events":[{"introduced":"7.0.0"},{"fixed":"7.1.5"}],"source":"AFFECTED_FIELD"}}],"versions":["v7.1.5-premium-beta.3","v7.1.4-alpha.2","v7.1.4","v7.1.3","v7.1.3-premium-beta.7","v7.1.3-premium-beta.6","v7.1.3-premium-beta.5","v7.1.3-premium-beta.4","v7.1.3-alpha.3","v7.1.3-alpha.2","v7.1.3-alpha.1","v7.1.2","v7.1.2-premium-beta.2","v7.1.2-premium-beta.1","v7.1.1","v7.1.1-packer-beta.3","v7.1.1-premium-beta.2","v7.1.1-premium-beta.1","v7.1.0","v7.0.7-premium-beta.13","v7.0.7-beta.12","v7.0.7-beta.11","v7.0.7-premium-beta.10","v7.0.7-premium-beta.9","v7.0.7-premium-beta.8","v7.0.7-premium-beta.7","v7.0.7-premium-beta.6","v7.0.7-premium-beta.5","v7.0.7-premium-beta.4","v7.0.7-premium-beta.3","v7.0.7-beta.2","v7.0.7-beta.1","v7.0.6","v7.0.5-premium-beta.2","v7.0.5-beta.1","v7.0.4","v7.0.4-premium-beta.3","v7.0.4-premium-beta.2","v7.0.3","v7.0.2","v7.0.2-premium-beta.3","v7.0.2-packer-beta.2","v7.0.1","v7.0.1-premium-beta.5","v7.0.1-premium-beta.4","v7.0.1-premium-beta.2","v7.0.1-premium.beta.2","v7.0.1-premium-beta.1","v7.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34725.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H"}]}