A high-severity remote code execution vulnerability in Readest allows attackers to execute arbitrary commands by bypassing HTML sanitization in EPUB files.

The application fails to adequately sanitize EPUB chapter content, specifically regarding the srcdoc attribute in iframe elements. This allows an unauthenticated attacker to inject malicious scripts that execute within the application context, leading to arbitrary code execution through the Tauri IPC interface.

This vulnerability poses a significant risk to the integrity and confidentiality of the user environment. Because the flaw allows for arbitrary code execution, an attacker could potentially access sensitive local data, install malware, or pivot within the host system. With a CVSS score of 8.8, this vulnerability is considered a high-priority threat that requires immediate remediation to prevent system compromise.

Immediate Action: Upgrade to Readest version 0.11.16 or later immediately to implement the hardened DOMPurify sanitizer configuration.

Proactive Monitoring: Monitor application logs for unusual iframe usage or unexpected script execution patterns within e-book content.

Compensating Controls: Users should exercise extreme caution when opening EPUB files from untrusted sources, as the primary attack vector involves the processing of malicious e-book content.

Public Exploit Available: No (exploit_available: false)

Given the potential for remote code execution, this vulnerability represents a critical risk to all Readest users. Organizations and individuals running affected versions must prioritize updating to version 0.11.16 immediately. Failure to patch leaves the system exposed to malicious EPUB files capable of gaining full control over the application process.