A high-severity vulnerability in the Tauri framework allows attackers to bypass Content Security Policy protections, potentially leading to arbitrary script execution.

This vulnerability is a Cross-site Scripting (XSS) flaw occurring because the CSP nonce mechanism is invalidated when the application policy permits data: or blob: schemes in the script-src directive. An unauthenticated attacker can leverage this configuration to bypass security controls and execute malicious scripts.

The ability to execute arbitrary scripts in the context of an application can lead to session hijacking, unauthorized data exfiltration, and the manipulation of application content. Given the CVSS score of 8.3, this flaw presents a significant risk to the integrity and confidentiality of user data. Organizations relying on Tauri for secure application delivery should prioritize addressing this configuration weakness to prevent potential compromise.

Immediate Action: Review the application CSP configuration and remove data: and blob: schemes from the script-src directive if they are not strictly required for application functionality.

Proactive Monitoring: Monitor application security logs for unusual script execution patterns or unauthorized attempts to inject content that deviates from standard application behavior.

Compensating Controls: Implement a strict Content Security Policy that avoids broad scheme-based allowances and utilizes cryptographically strong nonces or hashes for all permitted scripts.

Public Exploit Available: No

This vulnerability highlights the importance of rigorous CSP configuration when using framework-level security hardening. Developers should immediately audit their Tauri applications to ensure that script-src directives do not include insecure scheme sources. Applying these configuration changes is critical to restoring the intended protection provided by the CSP nonce mechanism and mitigating the risk of cross-site scripting attacks.