CVE-2024-25545: Weave Desktop

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component.

Affected products

• Weave Weave Desktop: from 7.78.10, up to and including 7.84.1

Published 2024-04-12. Last modified 2026-06-17.