CVE-2023-46115

CVE-2023-46115 describes a misconfiguration vulnerability in Tauri applications using the Vite frontend, specifically when an insecure example configuration from Tauri documentation was copied into vite.config.ts. This flaw could lead to the bundling and leakage of TAURI_PRIVATE_KEY and TAURI_KEY_PASSWORD into the released application. Rated Medium severity (CVSS 5.5), the vulnerability has a local attack vector and high confidentiality impact, allowing an attacker with local access to potentially compromise sensitive keys. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.