CVE-2024-23755

8.8 highEPSS 1.1%

High (8.8) in clickup clickup. EPSS 1.1% chance of exploitation in the next 30 days.

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2024-03-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

clickup:clickup

References

https://clickup.com/security/disclosures
https://clickup.com/terms/security-policy
https://www.electronjs.org/blog/statement-run-as-node-cves
https://www.electronjs.org/docs/latest/tutorial/fuses
https://clickup.com/security/disclosures

Check your stack JSON