Code Execution Risk in Mendix Studio Pro by Mendix
CVE-2026-48192

6.8MEDIUM

What is CVE-2026-48192?

A security issue has been identified in various versions of Mendix Studio Pro, where improper validation and sanitization of project files during the build process can lead to potential code execution vulnerabilities. An attacker may exploit this flaw by tricking a user into executing a specially crafted project file on their local system, thereby executing arbitrary code in the context of that user's privileges. Users are advised to update to supported versions to mitigate this risk.

Affected Version(s)

Mendix Studio Pro 10.11 0

Mendix Studio Pro 10.12 0

Mendix Studio Pro 10.13 0

References

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.