A vulnerability marked as critical has been reported in Via Code up to 2.20. This vulnerability affects the function parseActions of the file ntfy.sh. The manipulation leads to privilege escalation.

This vulnerability is listed as CVE-2026-39087. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.