CWE-1249: Application-Level Admin Tool with Inconsistent View of Underlying Operating System
Filter
The product provides an application for administrators to manage parts of the underlying operating system, but the application does not accurately identify all of the relevant entities or resources that exist in the OS; that is, the application's model of the OS's state is inconsistent with the OS's actual state.
What the weakness is: CWE-1249 at MITRE. All weaknesses
Ask an AI about CWE-1249
Show the prompt
Explain CWE-1249: Application-Level Admin Tool with Inconsistent View of Underlying Operating System and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1249.html and https://cve.bz/cve/cwe/1249?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 8.3CVE-2026-17497EPSS 0.7%
NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invo…