Notepad++ config.xml Arbitrary Code Execution Vulnerability (CVE-2026-48778) Advisory

Vulnerability Overview Vulnerability Name: Arbitrary Code Execution Vulnerability (CVE-2026-48778) Description: Attackers can execute arbitrary code via the option in the configuration. Scope of Impact Affected Versions: All versions of Notepad++ Affected Component: The option in the configuration file Remediation Fix Measures: - Remove the configuration option. - Add the "Open containing folder in PowerShell" command. - Use trusted system paths for cmd and PowerShell. Code Changes 1. 2. 3. 4. 5. ```cpp { VK_O, IDM_FILE_OPEN, true, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_FOLDER, false, false, false, L"Open containing folder in Explorer" }, { VK_NULL, IDM_FILE_OPEN_CMD, false, false, false, L"Open containing folder in Command Prompt" }, { VK_NULL, IDM_FILE_OPEN_POWERSHELL, false, false, false, L"Open containing folder in PowerShell" }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false, false, NULLPTR }, { VK_NULL, IDM_FILE_OPEN_DEFAULT_VIEWER, false, false,

Goal Reached Thanks to every supporter — we hit 100%!

Notepad++ config.xml Arbitrary Code Execution Vulnerability (CVE-2026-48778) Advisory

More from this source