A vulnerability labeled as problematic has been found in notepad-plus-plus Notepad++ up to 8.9.1. This affects an unknown part of the file explorer.exe. Executing a manipulation can lead to untrusted search path.
This vulnerability appears as CVE-2026-25926. The attack requires local access. There is no available exploit.
The affected component should be upgraded.
