A vulnerability was found in electron-userland electron-builder and builder-util-runtime up to 26.14.x. It has been rated as problematic. This issue affects some unknown processing of the component Personal Access Token Handler. This manipulation causes information disclosure.
This vulnerability is registered as CVE-2026-54673. Remote exploitation of the attack is possible. No exploit is available.
Upgrading the affected component is advised.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-54673 | electron-userland electron-builder/builder-util-runtime up to 26.14.x Personal Access Token information disclosure (GHSA-p2f4-r6v6-j797 / Nessus ID 325147)
A vulnerability was found in electron-userland electron-builder and builder-util-runtime up to 26.14.x. It has been rated as problematic. This issue affects…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
CISA-SSVC-Triage (vulnrichment)CVE-2026-54673
Exploitation: poc (PoC verfügbar)Automatable: no (Nicht automatisierbar)Technical Impact: partial (Teilweise)
Quelle: CISA-ADP vulnrichment · Stand 2026-07-01T13:26:40.473989Z · CISA Coordinator
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com