What’s Vulnerable › Products

jgraph drawio-desktop vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your jgraph drawio-desktop version is affected

Latest jgraph drawio-desktop vulnerabilities

• CVE-2026-119333 — draw.io Desktop allows Windows executable search-path hijacking (CVSS 7.8)
• CVE-2026-114606 — draw.io Desktop: Arbitrary local-file read via read-side IPC (no blessed-path gate) (CVSS 5.6)