Wails v2 Origin Validator Bypass via Wildcard Pattern - CVE-2026-34157
A vulnerability in Wails v2's `BindingsAllowedOrigins` allows an attacker to bypass origin restrictions via a wildcard pattern suffix match. This could lead to arbitrary Go method invocation, potentially resulting in file system access, data exfiltration, or code execution. The vulnerability has a CVSS score of 7.6 and affects all desktop platforms. Immediate patching or mitigation is recommended.