CVE-2026-113411 Nerimity CVE debrief

Who should care

Defenders responsible for Nerimity Desktop installations should assess exposure and prioritize upgrading to version 2.3.3 or later. They should also review and verify the patch f4df21bbc290f6c1956d899cf4da9e963074a6e4, and monitor for potential exploitation attempts. Security teams and vulnerability management teams should track exceptions, retest remediated assets, and ensure evidence of patch application is documented.

Why it matters

Defenders should care about CVE-2026-113411 because it affects Nerimity Desktop up to 2.2.2, allowing for improper authorization in custom URL schemes, which could lead to unauthorized access or code execution. Upgrading to version 2.3.3 or later is recommended.

• Potential unauthorized access to sensitive information
• Possible execution of arbitrary code
• Required verification of patch application
• Need for monitoring and detection of potential exploitation attempts

Technical summary

The vulnerability is caused by improper authorization in the handler for custom URL schemes in the shell.openExternal function of the mainWindow.js file in Nerimity Desktop up to 2.2.2. This could lead to unauthorized access or code execution. The issue can be resolved by upgrading to version 2.3.3 or later. The patch f4df21bbc290f6c1956d899cf4da9e963074a6e4 fixes this vulnerability. Defenders should prioritize patching to prevent potential attacks. The attack vector is remote, and the exploit has been made public.

Defensive priority

Defenders should prioritize upgrading to version 2.3.3 or later to resolve this issue.

Recommended defensive actions

• Upgrade to version 2.3.3 or later
• Review and verify the patch f4df21bbc290f6c1956d899cf4da9e963074a6e4
• Monitor for potential exploitation attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The vulnerability was found in Nerimity Desktop up to 2.2.2. The patch f4df21bbc290f6c1956d899cf4da9e963074a6e4 is identified. Upgrading to version 2.3.3 or later can resolve this issue. Evidence is limited; defenders should verify patch application and monitor for exploitation attempts. The CVE record was published on 2026-10-20T14:30:19.695Z.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.