AIKIDO-2026-917501
electron is vulnerable to Sandbox Bypass
42
CVE Score
Medium
Sandbox Bypass
TL;DR
Electron opens new windows for links triggered inside a sandboxed iframe through the OpenURL navigation path. On that path the opened window did not inherit the iframe's sandbox restrictions, so content confined to a sandboxed iframe could obtain a window that runs without those restrictions. This lets untrusted embedded content escape the sandbox boundary the application relied on. The fix makes such windows inherit the iframe's sandbox flags unless allow-popups-to-escape-sandbox is set.
How do I fix this?
Upgrade the electron library to the patch version.
Who does this affect?
You are affected if you are running a version that falls within a vulnerable range and your application embeds untrusted content in sandboxed iframes and relies on the iframe sandbox to restrict windows opened from that content.
Package
Versions
1.3.1 - 41.10.3
Fixed in 41.10.442.0.0 - 42.5.1
Fixed in 42.5.2Background info
electron is vulnerable to Sandbox Bypass in versions 1.3.1 - 41.10.3 and 42.0.0 - 42.5.1.
Links
GitHub Releases
github.com/electron/electron/releases/tag/v41.10.4github.com/electron/electron/releases/tag/v42.5.2github.com/electron/electron/releases/tag/v43.0.0Fix Commits
github.com/electron/electron/commit/7ea14d5f55ecb11a30447701ddca16b3feee0bbagithub.com/electron/electron/commit/e26b2640e7795c42bfb111b76009cbb4327c9a69github.com/electron/electron/commit/ebe1165ee2b05c203c26dd2244ef1c5b9b1c04da
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.