Remote Code Execution Vulnerability in Soda PDF Desktop by Visual Community

CVE-2025-14415

What is CVE-2025-14415?

This vulnerability in Soda PDF Desktop arises from insufficient user interface warnings during the execution of the Launch action. Malicious actors can exploit this flaw to execute arbitrary code on the compromised system, provided the user interacts with a harmful web page or file. By allowing dangerous scripts to execute without adequate user warnings, this vulnerability poses a significant risk to data integrity and system security.

References