CVE-2026-28373 | THREATINT

Description

The Stackfield Desktop App before 1.10.2 for macOS and Windows contains a path traversal vulnerability in certain decryption functionality when processing the filePath property. A malicious export can write arbitrary content to any path on the victim's filesystem.

PUBLISHED Reserved 2026-02-27 | Published 2026-04-03 | Updated 2026-04-03 | Assigner mitre

References

www.stackfield.com/desktop-apps

www.rcesecurity.com/advisories/cve-2026-28373/

www.rcesecurity.com/...-arbitrary-file-write-cve-2026-28373/

cve.org (CVE-2026-28373)

nvd.nist.gov (CVE-2026-28373)

Download JSON