CVE-2026-49492

EIP tracks 1 public exploit for CVE-2026-49492. PoCs published by byte16384.

AI-analyzed exploit summary The repository contains a markdown file with a deceptive mailto link that attempts to execute 'calc.exe' via a crafted email address, which is a social engineering tactic rather than a legitimate PoC. No actual exploit code or technical details about CVE-2026-49492 are provided.

Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not validate untrusted inputs taken from the markdown document - the diagram filename attribute, imported file paths, and the latex_engine code-chunk attribute. On Windows, a crafted markdown document can inject operating system commands that execute when the document is previewed. Fixed in 0.8.28 by passing these inputs as literal arguments instead of through a shell and validating them before use.