Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-73227 (GCVE-0-2026-73227)

Vulnerability from nvd – Published: 2026-08-11 18:45 – Updated: 2026-08-11 18:45

Title

electerm's RDP clipboard file download may parse unsafe file name

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious RDP server to write attacker-controlled content outside the selected save directory because the RDP clipboard download path in src/client/components/rdp/file-transfer.js passes the server-controlled CLIPRDR filename fileInfo.name to osResolve without sanitization. This issue is fixed in version 3.15.120.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/451bf…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.15.120

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.15.120"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious RDP server to write attacker-controlled content outside the selected save directory because the RDP clipboard download path in src/client/components/rdp/file-transfer.js passes the server-controlled CLIPRDR filename fileInfo.name to osResolve without sanitization. This issue is fixed in version 3.15.120."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-11T18:45:21.540Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-gm6q-5vpx-3mwf",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-gm6q-5vpx-3mwf"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/451bf3000672c00b0c3b148fbf3c148c205ce350",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/451bf3000672c00b0c3b148fbf3c148c205ce350"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.15.120",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.15.120"
        }
      ],
      "source": {
        "advisory": "GHSA-gm6q-5vpx-3mwf",
        "discovery": "UNKNOWN"
      },
      "title": "electerm\u0027s RDP clipboard file download may parse unsafe file name"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-73227",
    "datePublished": "2026-08-11T18:45:21.540Z",
    "dateReserved": "2026-08-11T14:41:20.122Z",
    "dateUpdated": "2026-08-11T18:45:21.540Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-73226 (GCVE-0-2026-73226)

Vulnerability from nvd – Published: 2026-08-11 18:44 – Updated: 2026-08-11 20:05

Title

Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and handleFs in src/app/server/fs.js, exposing Upgrade and fsExport methods that can execute commands, open files, mutate the filesystem, or terminate the process. This issue is fixed in version 3.15.186.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-913 - Improper Control of Dynamically-Managed Code Resources

Assigner

GitHub_M

References

4 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/pull/4447	x_refsource_MISC
https://github.com/electerm/electerm/commit/b1729…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.15.186

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-73226",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-11T20:05:25.435000Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-11T20:05:46.743Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.15.186"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and handleFs in src/app/server/fs.js, exposing Upgrade and fsExport methods that can execute commands, open files, mutate the filesystem, or terminate the process. This issue is fixed in version 3.15.186."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-913",
              "description": "CWE-913: Improper Control of Dynamically-Managed Code Resources",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-11T18:44:01.610Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-8chw-jwc5-8587",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-8chw-jwc5-8587"
        },
        {
          "name": "https://github.com/electerm/electerm/pull/4447",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/pull/4447"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/b1729eb67a4cd9cf1182de69dc2c8e051931740f",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/b1729eb67a4cd9cf1182de69dc2c8e051931740f"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.15.186",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.15.186"
        }
      ],
      "source": {
        "advisory": "GHSA-8chw-jwc5-8587",
        "discovery": "UNKNOWN"
      },
      "title": "Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-73226",
    "datePublished": "2026-08-11T18:44:01.610Z",
    "dateReserved": "2026-08-11T14:41:20.122Z",
    "dateUpdated": "2026-08-11T20:05:46.743Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-73225 (GCVE-0-2026-73225)

Vulnerability from nvd – Published: 2026-08-11 18:42 – Updated: 2026-08-11 19:04

Title

electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filename

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to write attacker-controlled content outside the selected download directory because recursive transfers in src/client/components/file-transfer/transfer.jsx pass server-supplied file.name and folder.name values to resolve without sanitization. This issue is fixed in version 3.15.120.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/deee1…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.15.120

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-73225",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-11T19:04:40.248328Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-11T19:04:56.094Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.15.120"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to write attacker-controlled content outside the selected download directory because recursive transfers in src/client/components/file-transfer/transfer.jsx pass server-supplied file.name and folder.name values to resolve without sanitization. This issue is fixed in version 3.15.120."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-11T18:42:16.087Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-6wh4-q387-x93j",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-6wh4-q387-x93j"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/deee11ffe558eaee5cad5822949ba3a7f87ae56a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/deee11ffe558eaee5cad5822949ba3a7f87ae56a"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.15.120",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.15.120"
        }
      ],
      "source": {
        "advisory": "GHSA-6wh4-q387-x93j",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filename"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-73225",
    "datePublished": "2026-08-11T18:42:16.087Z",
    "dateReserved": "2026-08-11T14:41:20.122Z",
    "dateUpdated": "2026-08-11T19:04:56.094Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-73224 (GCVE-0-2026-73224)

Vulnerability from nvd – Published: 2026-08-11 18:39 – Updated: 2026-08-11 18:39

Title

Electerm check folder size function may get attacked by unsafe folder name

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties and Calculate Size because calcLocal in src/client/components/sftp/file-info-modal.jsx inserts the server-controlled folder name into a du -sh shell command without safely escaping single quotes. This issue is fixed in version 3.15.120.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/36b16…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.15.120

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.15.120"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties and Calculate Size because calcLocal in src/client/components/sftp/file-info-modal.jsx inserts the server-controlled folder name into a du -sh shell command without safely escaping single quotes. This issue is fixed in version 3.15.120."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-11T18:39:20.631Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-4wx8-4m69-8rw5",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-4wx8-4m69-8rw5"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/36b16fb66936bb7c65fbcdf706dfd1b77f0750a7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/36b16fb66936bb7c65fbcdf706dfd1b77f0750a7"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.15.120",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.15.120"
        }
      ],
      "source": {
        "advisory": "GHSA-4wx8-4m69-8rw5",
        "discovery": "UNKNOWN"
      },
      "title": "Electerm check folder size function may get attacked by unsafe folder name"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-73224",
    "datePublished": "2026-08-11T18:39:20.631Z",
    "dateReserved": "2026-08-11T14:41:20.122Z",
    "dateUpdated": "2026-08-11T18:39:20.631Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-73223 (GCVE-0-2026-73223)

Vulnerability from nvd – Published: 2026-08-11 18:37 – Updated: 2026-08-11 18:37

Title

electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious SFTP server to write attacker-controlled content outside the temporary directory because the server-controlled filename name used by editWithSystemEditor in src/client/components/sftp/file-item.jsx is interpolated into path.resolve without sanitization. This issue is fixed in version 3.15.120.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/32ea2…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.15.120

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.15.120"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious SFTP server to write attacker-controlled content outside the temporary directory because the server-controlled filename name used by editWithSystemEditor in src/client/components/sftp/file-item.jsx is interpolated into path.resolve without sanitization. This issue is fixed in version 3.15.120."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-11T18:37:41.026Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-4cgc-4vgf-q55c",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-4cgc-4vgf-q55c"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/32ea29365762b3451b1f2fcc0ef78104384db282",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/32ea29365762b3451b1f2fcc0ef78104384db282"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.15.120",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.15.120"
        }
      ],
      "source": {
        "advisory": "GHSA-4cgc-4vgf-q55c",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-73223",
    "datePublished": "2026-08-11T18:37:41.026Z",
    "dateReserved": "2026-08-11T14:41:20.122Z",
    "dateUpdated": "2026-08-11T18:37:41.026Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-45787 (GCVE-0-2026-45787)

Vulnerability from nvd – Published: 2026-05-28 17:17 – Updated: 2026-05-29 15:29

Title

electerm's encrypt method not safe enough

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC leads to confidentiality and integrity failures for synced bookmark/profile data. Attackers can crack common passwords across installs and perform undetected ciphertext bit-flips to alter config/bookmarks. This vulnerability is fixed in 3.9.5.

Severity

6 (Medium)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-326 - Inadequate Encryption Strength
CWE-329 - Generation of Predictable IV with CBC Mode
CWE-353 - Missing Support for Integrity Check
CWE-759 - Use of a One-Way Hash without a Salt
CWE-916 - Use of Password Hash With Insufficient Computational Effort

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/9dd82…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.9.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-45787",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-29T15:29:07.655890Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-29T15:29:15.127Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.9.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC leads to confidentiality and integrity failures for synced bookmark/profile data. Attackers can crack common passwords across installs and perform undetected ciphertext bit-flips to alter config/bookmarks. This vulnerability is fixed in 3.9.5."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-326",
              "description": "CWE-326: Inadequate Encryption Strength",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-329",
              "description": "CWE-329: Generation of Predictable IV with CBC Mode",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-353",
              "description": "CWE-353: Missing Support for Integrity Check",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-759",
              "description": "CWE-759: Use of a One-Way Hash without a Salt",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-916",
              "description": "CWE-916: Use of Password Hash With Insufficient Computational Effort",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-28T17:17:56.385Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-g29v-q6h7-76wh",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-g29v-q6h7-76wh"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/9dd8295e37d53396b980cd45dfc5ed11ad79b937",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/9dd8295e37d53396b980cd45dfc5ed11ad79b937"
        }
      ],
      "source": {
        "advisory": "GHSA-g29v-q6h7-76wh",
        "discovery": "UNKNOWN"
      },
      "title": "electerm\u0027s encrypt method not safe enough"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-45787",
    "datePublished": "2026-05-28T17:17:56.385Z",
    "dateReserved": "2026-05-13T08:19:32.602Z",
    "dateUpdated": "2026-05-29T15:29:15.127Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-45353 (GCVE-0-2026-45353)

Vulnerability from nvd – Published: 2026-05-28 17:19 – Updated: 2026-05-28 19:27

Title

electerm: Local code through electerm's single-instance socket

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vulnerability is fixed in 3.9.0.

Severity

9.3 (Critical)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')
CWE-732 - Incorrect Permission Assignment for Critical Resource
CWE-940 - Improper Verification of Source of a Communication Channel

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/0599e…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: >= 3.0.6, < 3.89.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-45353",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-28T19:27:17.683676Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-28T19:27:52.948Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.0.6, \u003c 3.89.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8,  This vulnerability is fixed in 3.9.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-732",
              "description": "CWE-732: Incorrect Permission Assignment for Critical Resource",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-940",
              "description": "CWE-940: Improper Verification of Source of a Communication Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-28T17:19:17.496Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-7p5m-v798-f8vv",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-7p5m-v798-f8vv"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/0599e67069b00e376a2e962649aaad6096e63507",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/0599e67069b00e376a2e962649aaad6096e63507"
        }
      ],
      "source": {
        "advisory": "GHSA-7p5m-v798-f8vv",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: Local code through electerm\u0027s single-instance socket"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-45353",
    "datePublished": "2026-05-28T17:19:17.496Z",
    "dateReserved": "2026-05-11T21:40:08.178Z",
    "dateUpdated": "2026-05-28T19:27:52.948Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-45058 (GCVE-0-2026-45058)

Vulnerability from nvd – Published: 2026-05-28 17:20 – Updated: 2026-05-30 02:04

Title

electerm: Import unsafe bookmark data could lead to unsafe operation when click local type bookmark

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In 3.8.8 and earlier, there is persistent local-pty code execution via imported bookmarks or compromised sync targets. Affects users who import bookmark JSON files or who have electerm sync configured (gist/WebDAV). The attacker can inject exec* fields or global config to cause remote code to run when a bookmark is opened or when sync is applied.

Severity

9.4 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')
CWE-345 - Insufficient Verification of Data Authenticity
CWE-494 - Download of Code Without Integrity Check
CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: <= 3.8.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-45058",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-30T02:03:52.146092Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-30T02:04:03.353Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c= 3.8.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In 3.8.8 and earlier, there is persistent local-pty code execution via imported bookmarks or compromised sync targets. Affects users who import bookmark JSON files or who have electerm sync configured (gist/WebDAV). The attacker can inject exec* fields or global config to cause remote code to run when a bookmark is opened or when sync is applied."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.4,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "ACTIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-345",
              "description": "CWE-345: Insufficient Verification of Data Authenticity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-494",
              "description": "CWE-494: Download of Code Without Integrity Check",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-915",
              "description": "CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-28T17:20:41.799Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-jgg9-rw32-44pj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-jgg9-rw32-44pj"
        }
      ],
      "source": {
        "advisory": "GHSA-jgg9-rw32-44pj",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: Import unsafe bookmark data could lead to unsafe operation when click local type bookmark"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-45058",
    "datePublished": "2026-05-28T17:20:41.799Z",
    "dateReserved": "2026-05-08T18:07:27.342Z",
    "dateUpdated": "2026-05-30T02:04:03.353Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43944 (GCVE-0-2026-43944)

Vulnerability from nvd – Published: 2026-05-08 03:08 – Updated: 2026-05-13 13:33

Title

electerm: dangerous code can be run through links or command line

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From versions 3.0.6 to before 3.8.15, electerm is vulnerable to arbitrary local code execution via deep links, CLI --opts, or crafted shortcuts. Exploit requires clicking a crafted electerm://... link or opening a crafted shortcut/command that launches electerm with attacker-controlled opts. This issue has been patched in version 3.8.15.

Severity

9.4 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-20 - Improper Input Validation
CWE-94 - Improper Control of Generation of Code ('Code Injection')
CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Assigner

GitHub_M

References

5 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/0599e…	x_refsource_MISC
https://github.com/electerm/electerm/commit/8a6a1…	x_refsource_MISC
https://github.com/electerm/electerm/commit/a79e0…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: >= 3.0.6, < 3.8.15

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-43944",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-11T18:06:05.901795Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-11T18:06:59.406Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.0.6, \u003c 3.8.15"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From versions 3.0.6 to before 3.8.15, electerm is vulnerable to arbitrary local code execution via deep links, CLI --opts, or crafted shortcuts. Exploit requires clicking a crafted electerm://... link or opening a crafted shortcut/command that launches electerm with attacker-controlled opts. This issue has been patched in version 3.8.15."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.4,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-829",
              "description": "CWE-829: Inclusion of Functionality from Untrusted Control Sphere",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T13:33:39.255Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-mpm8-cx2p-626q",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-mpm8-cx2p-626q"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/0599e67069b00e376a2e962649aaad6096e63507",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/0599e67069b00e376a2e962649aaad6096e63507"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/8a6a17951e96d715f5a231532bbd8303fe208700",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/8a6a17951e96d715f5a231532bbd8303fe208700"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/a79e06f4a1f0ac6376c3d2411ef4690fa0377742",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/a79e06f4a1f0ac6376c3d2411ef4690fa0377742"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.8.15",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.8.15"
        }
      ],
      "source": {
        "advisory": "GHSA-mpm8-cx2p-626q",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: dangerous code can be run through links or command line"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-43944",
    "datePublished": "2026-05-08T03:08:09.046Z",
    "dateReserved": "2026-05-04T16:59:09.090Z",
    "dateUpdated": "2026-05-13T13:33:39.255Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43943 (GCVE-0-2026-43943)

Vulnerability from nvd – Published: 2026-05-08 02:55 – Updated: 2026-05-08 14:44

Title

electerm: RCE via malicious SSH server filename in openFileWithEditor

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code execution (RCE) vulnerability exists in electerm's SFTP open with system editor or "Edit with custom editor" feature. When a user opts to edit a file using open with system editor or open with a custom editor, the filename is passed directly into a command line without sanitization. A malicious actor controlling the SSH server or user OS can exploit this by crafting a filename containing shell metacharacters. If a victim subsequently attempts to edit this file, the injected commands are executed on their machine with the user's privileges. This could allow the attacker to run arbitrary code, install malware, or move laterally within the network. This issue has been patched in version 3.7.9.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/24ce7…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.7.9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-43943",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T14:43:39.782780Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T14:44:16.203Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.7.9"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code execution (RCE) vulnerability exists in electerm\u0027s SFTP open with system editor or \"Edit with custom editor\" feature. When a user opts to edit a file using open with system editor or open with a custom editor, the filename is passed directly into a command line without sanitization. A malicious actor controlling the SSH server or user OS can exploit this by crafting a filename containing shell metacharacters. If a victim subsequently attempts to edit this file, the injected commands are executed on their machine with the user\u0027s privileges. This could allow the attacker to run arbitrary code, install malware, or move laterally within the network. This issue has been patched in version 3.7.9."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-88",
              "description": "CWE-88: Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T02:55:51.285Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-q4p8-8j9m-8hxj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-q4p8-8j9m-8hxj"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/24ce7103e264cffe6eb5476c0506a2379e6f8333",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/24ce7103e264cffe6eb5476c0506a2379e6f8333"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.7.9",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.7.9"
        }
      ],
      "source": {
        "advisory": "GHSA-q4p8-8j9m-8hxj",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: RCE via malicious SSH server filename in openFileWithEditor"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-43943",
    "datePublished": "2026-05-08T02:55:51.285Z",
    "dateReserved": "2026-05-04T16:59:09.090Z",
    "dateUpdated": "2026-05-08T14:44:16.203Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43942 (GCVE-0-2026-43942)

Vulnerability from nvd – Published: 2026-05-08 03:03 – Updated: 2026-05-08 23:09

Title

electerm: Full process.env exposed to renderer via window.pre.env in electerm

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, the getConstants() IPC handler in src/app/lib/ipc-sync.js serialises the entire process.env object and sends it to the renderer. The data is stored as window.pre.env and is accessible from any JavaScript running in the renderer (e.g., via the DevTools console or a compromised webview context). An attacker who achieves any JavaScript execution within the renderer can trivially exfiltrate these secrets to a remote server, leading to cloud account compromise, supply chain attacks, and lateral movement. At time of publication, there are no publicly available patches.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
CWE-312 - Cleartext Storage of Sensitive Information

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: <= 3.8.15

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-43942",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T23:09:35.474308Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T23:09:52.223Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c= 3.8.15"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, the getConstants() IPC handler in src/app/lib/ipc-sync.js serialises the entire process.env object and sends it to the renderer. The data is stored as window.pre.env and is accessible from any JavaScript running in the renderer (e.g., via the DevTools console or a compromised webview context). An attacker who achieves any JavaScript execution within the renderer can trivially exfiltrate these secrets to a remote server, leading to cloud account compromise, supply chain attacks, and lateral movement. At time of publication, there are no publicly available patches."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-312",
              "description": "CWE-312: Cleartext Storage of Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T03:03:54.752Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-37j4-88rp-2f6h",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-37j4-88rp-2f6h"
        }
      ],
      "source": {
        "advisory": "GHSA-37j4-88rp-2f6h",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: Full process.env exposed to renderer via window.pre.env in electerm"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-43942",
    "datePublished": "2026-05-08T03:03:54.752Z",
    "dateReserved": "2026-05-04T16:59:09.090Z",
    "dateUpdated": "2026-05-08T23:09:52.223Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43941 (GCVE-0-2026-43941)

Vulnerability from nvd – Published: 2026-05-08 03:01 – Updated: 2026-05-08 21:28

Title

Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, Electerm's terminal hyperlink handler passes any URL clicked in the terminal directly to shell.openExternal without any protocol validation. An attacker who controls terminal output (e.g., via a malicious SSH server, compromised remote host, or malicious plugin rendering terminal content) can thus achieve arbitrary code execution or local file access on the victim's machine, requiring only that the victim clicks a displayed link. At time of publication, there are no publicly available patches.

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: <= 3.8.15

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-43941",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T14:34:47.525667Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T21:28:44.766Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c= 3.8.15"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, Electerm\u0027s terminal hyperlink handler passes any URL clicked in the terminal directly to shell.openExternal without any protocol validation. An attacker who controls terminal output (e.g., via a malicious SSH server, compromised remote host, or malicious plugin rendering terminal content) can thus achieve arbitrary code execution or local file access on the victim\u0027s machine, requiring only that the victim clicks a displayed link. At time of publication, there are no publicly available patches."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-88",
              "description": "CWE-88: Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "CWE-601: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T03:01:12.461Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-fwf6-j56g-m97c",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-fwf6-j56g-m97c"
        }
      ],
      "source": {
        "advisory": "GHSA-fwf6-j56g-m97c",
        "discovery": "UNKNOWN"
      },
      "title": "Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-43941",
    "datePublished": "2026-05-08T03:01:12.461Z",
    "dateReserved": "2026-05-04T16:59:09.090Z",
    "dateUpdated": "2026-05-08T21:28:44.766Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43940 (GCVE-0-2026-43940)

Vulnerability from nvd – Published: 2026-05-08 02:58 – Updated: 2026-05-08 12:52

Title

electerm: Path traversal in electerm runWidget leads to arbitrary code execution

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.16, the runWidget function in src/app/widgets/load-widget.js constructs a file path by directly concatenating user‑supplied widget identifiers without any sanitisation. Because runWidget is exposed to the renderer process via an asynchronous IPC handler with no input validation, an attacker who achieves JavaScript execution inside the renderer (for example, through a malicious plugin or a cross‑site scripting flaw in the built‑in webview) can abuse a path traversal (../) to load and execute an arbitrary JavaScript file anywhere on the victim’s filesystem. This gives the attacker local code execution with the full privileges of the electerm process, leading to complete system compromise. This issue has been patched in version 3.7.16.

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.7.16

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-43940",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T12:52:37.558703Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T12:52:47.567Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.7.16"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.16, the runWidget function in src/app/widgets/load-widget.js constructs a file path by directly concatenating user\u2011supplied widget identifiers without any sanitisation. Because runWidget is exposed to the renderer process via an asynchronous IPC handler with no input validation, an attacker who achieves JavaScript execution inside the renderer (for example, through a malicious plugin or a cross\u2011site scripting flaw in the built\u2011in webview) can abuse a path traversal (../) to load and execute an arbitrary JavaScript file anywhere on the victim\u2019s filesystem. This gives the attacker local code execution with the full privileges of the electerm process, leading to complete system compromise. This issue has been patched in version 3.7.16."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-829",
              "description": "CWE-829: Inclusion of Functionality from Untrusted Control Sphere",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T02:58:05.646Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-f77v-9vpc-6pjm",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-f77v-9vpc-6pjm"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.7.16",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.7.16"
        }
      ],
      "source": {
        "advisory": "GHSA-f77v-9vpc-6pjm",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: Path traversal in electerm runWidget leads to arbitrary code execution"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-43940",
    "datePublished": "2026-05-08T02:58:05.646Z",
    "dateReserved": "2026-05-04T16:59:09.089Z",
    "dateUpdated": "2026-05-08T12:52:47.567Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-41501 (GCVE-0-2026-41501)

Vulnerability from nvd – Published: 2026-05-08 02:51 – Updated: 2026-05-08 11:19

Title

electerm has Command Injection Vulnerability via runLinux function

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:130. The runLinux() function appends attacker-controlled remote version strings directly into an exec("rm -rf ...") command without validation. This issue has been patched in version 3.3.8.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/59708…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.3.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-41501",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T11:19:45.771219Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T11:19:54.297Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.3.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:130. The runLinux() function appends attacker-controlled remote version strings directly into an exec(\"rm -rf ...\") command without validation. This issue has been patched in version 3.3.8."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77: Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T02:51:10.144Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-8x35-hph8-37hq",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-8x35-hph8-37hq"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/59708b38c8a52f5db59d7d4eff98e31d573128ee",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/59708b38c8a52f5db59d7d4eff98e31d573128ee"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.3.8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.3.8"
        }
      ],
      "source": {
        "advisory": "GHSA-8x35-hph8-37hq",
        "discovery": "UNKNOWN"
      },
      "title": "electerm has Command Injection Vulnerability via runLinux function"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-41501",
    "datePublished": "2026-05-08T02:51:10.144Z",
    "dateReserved": "2026-04-20T18:18:50.680Z",
    "dateUpdated": "2026-05-08T11:19:54.297Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-41500 (GCVE-0-2026-41500)

Vulnerability from nvd – Published: 2026-05-08 02:53 – Updated: 2026-05-08 23:06

Title

electerm has Command Injection Vulnerability via runMac function

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:150. The runMac() function appends attacker-controlled remote releaseInfo.name directly into an exec("open ...") command without validation. This issue has been patched in version 3.3.8.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/59708…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.3.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-41500",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T23:06:11.862427Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T23:06:39.245Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.3.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:150. The runMac() function appends attacker-controlled remote releaseInfo.name directly into an exec(\"open ...\") command without validation. This issue has been patched in version 3.3.8."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77: Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T02:53:44.494Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-wxw2-rwmh-vr8f",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-wxw2-rwmh-vr8f"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/59708b38c8a52f5db59d7d4eff98e31d573128ee",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/59708b38c8a52f5db59d7d4eff98e31d573128ee"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.3.8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.3.8"
        }
      ],
      "source": {
        "advisory": "GHSA-wxw2-rwmh-vr8f",
        "discovery": "UNKNOWN"
      },
      "title": "electerm has Command Injection Vulnerability via runMac function"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-41500",
    "datePublished": "2026-05-08T02:53:44.494Z",
    "dateReserved": "2026-04-20T18:18:50.680Z",
    "dateUpdated": "2026-05-08T23:06:39.245Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-73227 (GCVE-0-2026-73227)

Vulnerability from cvelistv5 – Published: 2026-08-11 18:45 – Updated: 2026-08-11 18:45

Title

electerm's RDP clipboard file download may parse unsafe file name

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious RDP server to write attacker-controlled content outside the selected save directory because the RDP clipboard download path in src/client/components/rdp/file-transfer.js passes the server-controlled CLIPRDR filename fileInfo.name to osResolve without sanitization. This issue is fixed in version 3.15.120.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/451bf…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.15.120

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.15.120"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious RDP server to write attacker-controlled content outside the selected save directory because the RDP clipboard download path in src/client/components/rdp/file-transfer.js passes the server-controlled CLIPRDR filename fileInfo.name to osResolve without sanitization. This issue is fixed in version 3.15.120."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-11T18:45:21.540Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-gm6q-5vpx-3mwf",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-gm6q-5vpx-3mwf"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/451bf3000672c00b0c3b148fbf3c148c205ce350",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/451bf3000672c00b0c3b148fbf3c148c205ce350"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.15.120",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.15.120"
        }
      ],
      "source": {
        "advisory": "GHSA-gm6q-5vpx-3mwf",
        "discovery": "UNKNOWN"
      },
      "title": "electerm\u0027s RDP clipboard file download may parse unsafe file name"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-73227",
    "datePublished": "2026-08-11T18:45:21.540Z",
    "dateReserved": "2026-08-11T14:41:20.122Z",
    "dateUpdated": "2026-08-11T18:45:21.540Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-73226 (GCVE-0-2026-73226)

Vulnerability from cvelistv5 – Published: 2026-08-11 18:44 – Updated: 2026-08-11 20:05

Title

Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and handleFs in src/app/server/fs.js, exposing Upgrade and fsExport methods that can execute commands, open files, mutate the filesystem, or terminate the process. This issue is fixed in version 3.15.186.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-913 - Improper Control of Dynamically-Managed Code Resources

Assigner

GitHub_M

References

4 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/pull/4447	x_refsource_MISC
https://github.com/electerm/electerm/commit/b1729…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.15.186

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-73226",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-11T20:05:25.435000Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-11T20:05:46.743Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.15.186"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and handleFs in src/app/server/fs.js, exposing Upgrade and fsExport methods that can execute commands, open files, mutate the filesystem, or terminate the process. This issue is fixed in version 3.15.186."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-913",
              "description": "CWE-913: Improper Control of Dynamically-Managed Code Resources",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-11T18:44:01.610Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-8chw-jwc5-8587",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-8chw-jwc5-8587"
        },
        {
          "name": "https://github.com/electerm/electerm/pull/4447",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/pull/4447"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/b1729eb67a4cd9cf1182de69dc2c8e051931740f",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/b1729eb67a4cd9cf1182de69dc2c8e051931740f"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.15.186",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.15.186"
        }
      ],
      "source": {
        "advisory": "GHSA-8chw-jwc5-8587",
        "discovery": "UNKNOWN"
      },
      "title": "Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-73226",
    "datePublished": "2026-08-11T18:44:01.610Z",
    "dateReserved": "2026-08-11T14:41:20.122Z",
    "dateUpdated": "2026-08-11T20:05:46.743Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-73225 (GCVE-0-2026-73225)

Vulnerability from cvelistv5 – Published: 2026-08-11 18:42 – Updated: 2026-08-11 19:04

Title

electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filename

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to write attacker-controlled content outside the selected download directory because recursive transfers in src/client/components/file-transfer/transfer.jsx pass server-supplied file.name and folder.name values to resolve without sanitization. This issue is fixed in version 3.15.120.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/deee1…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.15.120

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-73225",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-11T19:04:40.248328Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-11T19:04:56.094Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.15.120"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to write attacker-controlled content outside the selected download directory because recursive transfers in src/client/components/file-transfer/transfer.jsx pass server-supplied file.name and folder.name values to resolve without sanitization. This issue is fixed in version 3.15.120."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-11T18:42:16.087Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-6wh4-q387-x93j",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-6wh4-q387-x93j"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/deee11ffe558eaee5cad5822949ba3a7f87ae56a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/deee11ffe558eaee5cad5822949ba3a7f87ae56a"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.15.120",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.15.120"
        }
      ],
      "source": {
        "advisory": "GHSA-6wh4-q387-x93j",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filename"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-73225",
    "datePublished": "2026-08-11T18:42:16.087Z",
    "dateReserved": "2026-08-11T14:41:20.122Z",
    "dateUpdated": "2026-08-11T19:04:56.094Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-73224 (GCVE-0-2026-73224)

Vulnerability from cvelistv5 – Published: 2026-08-11 18:39 – Updated: 2026-08-11 18:39

Title

Electerm check folder size function may get attacked by unsafe folder name

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties and Calculate Size because calcLocal in src/client/components/sftp/file-info-modal.jsx inserts the server-controlled folder name into a du -sh shell command without safely escaping single quotes. This issue is fixed in version 3.15.120.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/36b16…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.15.120

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.15.120"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties and Calculate Size because calcLocal in src/client/components/sftp/file-info-modal.jsx inserts the server-controlled folder name into a du -sh shell command without safely escaping single quotes. This issue is fixed in version 3.15.120."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-11T18:39:20.631Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-4wx8-4m69-8rw5",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-4wx8-4m69-8rw5"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/36b16fb66936bb7c65fbcdf706dfd1b77f0750a7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/36b16fb66936bb7c65fbcdf706dfd1b77f0750a7"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.15.120",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.15.120"
        }
      ],
      "source": {
        "advisory": "GHSA-4wx8-4m69-8rw5",
        "discovery": "UNKNOWN"
      },
      "title": "Electerm check folder size function may get attacked by unsafe folder name"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-73224",
    "datePublished": "2026-08-11T18:39:20.631Z",
    "dateReserved": "2026-08-11T14:41:20.122Z",
    "dateUpdated": "2026-08-11T18:39:20.631Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-73223 (GCVE-0-2026-73223)

Vulnerability from cvelistv5 – Published: 2026-08-11 18:37 – Updated: 2026-08-11 18:37

Title

electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious SFTP server to write attacker-controlled content outside the temporary directory because the server-controlled filename name used by editWithSystemEditor in src/client/components/sftp/file-item.jsx is interpolated into path.resolve without sanitization. This issue is fixed in version 3.15.120.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/32ea2…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.15.120

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.15.120"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious SFTP server to write attacker-controlled content outside the temporary directory because the server-controlled filename name used by editWithSystemEditor in src/client/components/sftp/file-item.jsx is interpolated into path.resolve without sanitization. This issue is fixed in version 3.15.120."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-11T18:37:41.026Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-4cgc-4vgf-q55c",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-4cgc-4vgf-q55c"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/32ea29365762b3451b1f2fcc0ef78104384db282",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/32ea29365762b3451b1f2fcc0ef78104384db282"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.15.120",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.15.120"
        }
      ],
      "source": {
        "advisory": "GHSA-4cgc-4vgf-q55c",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-73223",
    "datePublished": "2026-08-11T18:37:41.026Z",
    "dateReserved": "2026-08-11T14:41:20.122Z",
    "dateUpdated": "2026-08-11T18:37:41.026Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-45058 (GCVE-0-2026-45058)

Vulnerability from cvelistv5 – Published: 2026-05-28 17:20 – Updated: 2026-05-30 02:04

Title

electerm: Import unsafe bookmark data could lead to unsafe operation when click local type bookmark

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In 3.8.8 and earlier, there is persistent local-pty code execution via imported bookmarks or compromised sync targets. Affects users who import bookmark JSON files or who have electerm sync configured (gist/WebDAV). The attacker can inject exec* fields or global config to cause remote code to run when a bookmark is opened or when sync is applied.

Severity

9.4 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')
CWE-345 - Insufficient Verification of Data Authenticity
CWE-494 - Download of Code Without Integrity Check
CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: <= 3.8.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-45058",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-30T02:03:52.146092Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-30T02:04:03.353Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c= 3.8.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In 3.8.8 and earlier, there is persistent local-pty code execution via imported bookmarks or compromised sync targets. Affects users who import bookmark JSON files or who have electerm sync configured (gist/WebDAV). The attacker can inject exec* fields or global config to cause remote code to run when a bookmark is opened or when sync is applied."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.4,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "ACTIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-345",
              "description": "CWE-345: Insufficient Verification of Data Authenticity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-494",
              "description": "CWE-494: Download of Code Without Integrity Check",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-915",
              "description": "CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-28T17:20:41.799Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-jgg9-rw32-44pj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-jgg9-rw32-44pj"
        }
      ],
      "source": {
        "advisory": "GHSA-jgg9-rw32-44pj",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: Import unsafe bookmark data could lead to unsafe operation when click local type bookmark"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-45058",
    "datePublished": "2026-05-28T17:20:41.799Z",
    "dateReserved": "2026-05-08T18:07:27.342Z",
    "dateUpdated": "2026-05-30T02:04:03.353Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-45353 (GCVE-0-2026-45353)

Vulnerability from cvelistv5 – Published: 2026-05-28 17:19 – Updated: 2026-05-28 19:27

Title

electerm: Local code through electerm's single-instance socket

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vulnerability is fixed in 3.9.0.

Severity

9.3 (Critical)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')
CWE-732 - Incorrect Permission Assignment for Critical Resource
CWE-940 - Improper Verification of Source of a Communication Channel

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/0599e…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: >= 3.0.6, < 3.89.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-45353",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-28T19:27:17.683676Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-28T19:27:52.948Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.0.6, \u003c 3.89.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8,  This vulnerability is fixed in 3.9.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-732",
              "description": "CWE-732: Incorrect Permission Assignment for Critical Resource",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-940",
              "description": "CWE-940: Improper Verification of Source of a Communication Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-28T17:19:17.496Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-7p5m-v798-f8vv",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-7p5m-v798-f8vv"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/0599e67069b00e376a2e962649aaad6096e63507",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/0599e67069b00e376a2e962649aaad6096e63507"
        }
      ],
      "source": {
        "advisory": "GHSA-7p5m-v798-f8vv",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: Local code through electerm\u0027s single-instance socket"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-45353",
    "datePublished": "2026-05-28T17:19:17.496Z",
    "dateReserved": "2026-05-11T21:40:08.178Z",
    "dateUpdated": "2026-05-28T19:27:52.948Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-45787 (GCVE-0-2026-45787)

Vulnerability from cvelistv5 – Published: 2026-05-28 17:17 – Updated: 2026-05-29 15:29

Title

electerm's encrypt method not safe enough

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC leads to confidentiality and integrity failures for synced bookmark/profile data. Attackers can crack common passwords across installs and perform undetected ciphertext bit-flips to alter config/bookmarks. This vulnerability is fixed in 3.9.5.

Severity

6 (Medium)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-326 - Inadequate Encryption Strength
CWE-329 - Generation of Predictable IV with CBC Mode
CWE-353 - Missing Support for Integrity Check
CWE-759 - Use of a One-Way Hash without a Salt
CWE-916 - Use of Password Hash With Insufficient Computational Effort

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/9dd82…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.9.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-45787",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-29T15:29:07.655890Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-29T15:29:15.127Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.9.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC leads to confidentiality and integrity failures for synced bookmark/profile data. Attackers can crack common passwords across installs and perform undetected ciphertext bit-flips to alter config/bookmarks. This vulnerability is fixed in 3.9.5."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-326",
              "description": "CWE-326: Inadequate Encryption Strength",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-329",
              "description": "CWE-329: Generation of Predictable IV with CBC Mode",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-353",
              "description": "CWE-353: Missing Support for Integrity Check",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-759",
              "description": "CWE-759: Use of a One-Way Hash without a Salt",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-916",
              "description": "CWE-916: Use of Password Hash With Insufficient Computational Effort",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-28T17:17:56.385Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-g29v-q6h7-76wh",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-g29v-q6h7-76wh"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/9dd8295e37d53396b980cd45dfc5ed11ad79b937",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/9dd8295e37d53396b980cd45dfc5ed11ad79b937"
        }
      ],
      "source": {
        "advisory": "GHSA-g29v-q6h7-76wh",
        "discovery": "UNKNOWN"
      },
      "title": "electerm\u0027s encrypt method not safe enough"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-45787",
    "datePublished": "2026-05-28T17:17:56.385Z",
    "dateReserved": "2026-05-13T08:19:32.602Z",
    "dateUpdated": "2026-05-29T15:29:15.127Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43944 (GCVE-0-2026-43944)

Vulnerability from cvelistv5 – Published: 2026-05-08 03:08 – Updated: 2026-05-13 13:33

Title

electerm: dangerous code can be run through links or command line

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From versions 3.0.6 to before 3.8.15, electerm is vulnerable to arbitrary local code execution via deep links, CLI --opts, or crafted shortcuts. Exploit requires clicking a crafted electerm://... link or opening a crafted shortcut/command that launches electerm with attacker-controlled opts. This issue has been patched in version 3.8.15.

Severity

9.4 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-20 - Improper Input Validation
CWE-94 - Improper Control of Generation of Code ('Code Injection')
CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Assigner

GitHub_M

References

5 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/0599e…	x_refsource_MISC
https://github.com/electerm/electerm/commit/8a6a1…	x_refsource_MISC
https://github.com/electerm/electerm/commit/a79e0…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: >= 3.0.6, < 3.8.15

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-43944",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-11T18:06:05.901795Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-11T18:06:59.406Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.0.6, \u003c 3.8.15"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From versions 3.0.6 to before 3.8.15, electerm is vulnerable to arbitrary local code execution via deep links, CLI --opts, or crafted shortcuts. Exploit requires clicking a crafted electerm://... link or opening a crafted shortcut/command that launches electerm with attacker-controlled opts. This issue has been patched in version 3.8.15."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.4,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-829",
              "description": "CWE-829: Inclusion of Functionality from Untrusted Control Sphere",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T13:33:39.255Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-mpm8-cx2p-626q",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-mpm8-cx2p-626q"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/0599e67069b00e376a2e962649aaad6096e63507",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/0599e67069b00e376a2e962649aaad6096e63507"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/8a6a17951e96d715f5a231532bbd8303fe208700",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/8a6a17951e96d715f5a231532bbd8303fe208700"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/a79e06f4a1f0ac6376c3d2411ef4690fa0377742",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/a79e06f4a1f0ac6376c3d2411ef4690fa0377742"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.8.15",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.8.15"
        }
      ],
      "source": {
        "advisory": "GHSA-mpm8-cx2p-626q",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: dangerous code can be run through links or command line"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-43944",
    "datePublished": "2026-05-08T03:08:09.046Z",
    "dateReserved": "2026-05-04T16:59:09.090Z",
    "dateUpdated": "2026-05-13T13:33:39.255Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43942 (GCVE-0-2026-43942)

Vulnerability from cvelistv5 – Published: 2026-05-08 03:03 – Updated: 2026-05-08 23:09

Title

electerm: Full process.env exposed to renderer via window.pre.env in electerm

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, the getConstants() IPC handler in src/app/lib/ipc-sync.js serialises the entire process.env object and sends it to the renderer. The data is stored as window.pre.env and is accessible from any JavaScript running in the renderer (e.g., via the DevTools console or a compromised webview context). An attacker who achieves any JavaScript execution within the renderer can trivially exfiltrate these secrets to a remote server, leading to cloud account compromise, supply chain attacks, and lateral movement. At time of publication, there are no publicly available patches.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
CWE-312 - Cleartext Storage of Sensitive Information

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: <= 3.8.15

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-43942",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T23:09:35.474308Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T23:09:52.223Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c= 3.8.15"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, the getConstants() IPC handler in src/app/lib/ipc-sync.js serialises the entire process.env object and sends it to the renderer. The data is stored as window.pre.env and is accessible from any JavaScript running in the renderer (e.g., via the DevTools console or a compromised webview context). An attacker who achieves any JavaScript execution within the renderer can trivially exfiltrate these secrets to a remote server, leading to cloud account compromise, supply chain attacks, and lateral movement. At time of publication, there are no publicly available patches."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-312",
              "description": "CWE-312: Cleartext Storage of Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T03:03:54.752Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-37j4-88rp-2f6h",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-37j4-88rp-2f6h"
        }
      ],
      "source": {
        "advisory": "GHSA-37j4-88rp-2f6h",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: Full process.env exposed to renderer via window.pre.env in electerm"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-43942",
    "datePublished": "2026-05-08T03:03:54.752Z",
    "dateReserved": "2026-05-04T16:59:09.090Z",
    "dateUpdated": "2026-05-08T23:09:52.223Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43941 (GCVE-0-2026-43941)

Vulnerability from cvelistv5 – Published: 2026-05-08 03:01 – Updated: 2026-05-08 21:28

Title

Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, Electerm's terminal hyperlink handler passes any URL clicked in the terminal directly to shell.openExternal without any protocol validation. An attacker who controls terminal output (e.g., via a malicious SSH server, compromised remote host, or malicious plugin rendering terminal content) can thus achieve arbitrary code execution or local file access on the victim's machine, requiring only that the victim clicks a displayed link. At time of publication, there are no publicly available patches.

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: <= 3.8.15

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-43941",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T14:34:47.525667Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T21:28:44.766Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c= 3.8.15"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, Electerm\u0027s terminal hyperlink handler passes any URL clicked in the terminal directly to shell.openExternal without any protocol validation. An attacker who controls terminal output (e.g., via a malicious SSH server, compromised remote host, or malicious plugin rendering terminal content) can thus achieve arbitrary code execution or local file access on the victim\u0027s machine, requiring only that the victim clicks a displayed link. At time of publication, there are no publicly available patches."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-88",
              "description": "CWE-88: Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "CWE-601: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T03:01:12.461Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-fwf6-j56g-m97c",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-fwf6-j56g-m97c"
        }
      ],
      "source": {
        "advisory": "GHSA-fwf6-j56g-m97c",
        "discovery": "UNKNOWN"
      },
      "title": "Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-43941",
    "datePublished": "2026-05-08T03:01:12.461Z",
    "dateReserved": "2026-05-04T16:59:09.090Z",
    "dateUpdated": "2026-05-08T21:28:44.766Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43940 (GCVE-0-2026-43940)

Vulnerability from cvelistv5 – Published: 2026-05-08 02:58 – Updated: 2026-05-08 12:52

Title

electerm: Path traversal in electerm runWidget leads to arbitrary code execution

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.16, the runWidget function in src/app/widgets/load-widget.js constructs a file path by directly concatenating user‑supplied widget identifiers without any sanitisation. Because runWidget is exposed to the renderer process via an asynchronous IPC handler with no input validation, an attacker who achieves JavaScript execution inside the renderer (for example, through a malicious plugin or a cross‑site scripting flaw in the built‑in webview) can abuse a path traversal (../) to load and execute an arbitrary JavaScript file anywhere on the victim’s filesystem. This gives the attacker local code execution with the full privileges of the electerm process, leading to complete system compromise. This issue has been patched in version 3.7.16.

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.7.16

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-43940",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T12:52:37.558703Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T12:52:47.567Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.7.16"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.16, the runWidget function in src/app/widgets/load-widget.js constructs a file path by directly concatenating user\u2011supplied widget identifiers without any sanitisation. Because runWidget is exposed to the renderer process via an asynchronous IPC handler with no input validation, an attacker who achieves JavaScript execution inside the renderer (for example, through a malicious plugin or a cross\u2011site scripting flaw in the built\u2011in webview) can abuse a path traversal (../) to load and execute an arbitrary JavaScript file anywhere on the victim\u2019s filesystem. This gives the attacker local code execution with the full privileges of the electerm process, leading to complete system compromise. This issue has been patched in version 3.7.16."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-829",
              "description": "CWE-829: Inclusion of Functionality from Untrusted Control Sphere",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T02:58:05.646Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-f77v-9vpc-6pjm",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-f77v-9vpc-6pjm"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.7.16",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.7.16"
        }
      ],
      "source": {
        "advisory": "GHSA-f77v-9vpc-6pjm",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: Path traversal in electerm runWidget leads to arbitrary code execution"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-43940",
    "datePublished": "2026-05-08T02:58:05.646Z",
    "dateReserved": "2026-05-04T16:59:09.089Z",
    "dateUpdated": "2026-05-08T12:52:47.567Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43943 (GCVE-0-2026-43943)

Vulnerability from cvelistv5 – Published: 2026-05-08 02:55 – Updated: 2026-05-08 14:44

Title

electerm: RCE via malicious SSH server filename in openFileWithEditor

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code execution (RCE) vulnerability exists in electerm's SFTP open with system editor or "Edit with custom editor" feature. When a user opts to edit a file using open with system editor or open with a custom editor, the filename is passed directly into a command line without sanitization. A malicious actor controlling the SSH server or user OS can exploit this by crafting a filename containing shell metacharacters. If a victim subsequently attempts to edit this file, the injected commands are executed on their machine with the user's privileges. This could allow the attacker to run arbitrary code, install malware, or move laterally within the network. This issue has been patched in version 3.7.9.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/24ce7…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.7.9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-43943",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T14:43:39.782780Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T14:44:16.203Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.7.9"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code execution (RCE) vulnerability exists in electerm\u0027s SFTP open with system editor or \"Edit with custom editor\" feature. When a user opts to edit a file using open with system editor or open with a custom editor, the filename is passed directly into a command line without sanitization. A malicious actor controlling the SSH server or user OS can exploit this by crafting a filename containing shell metacharacters. If a victim subsequently attempts to edit this file, the injected commands are executed on their machine with the user\u0027s privileges. This could allow the attacker to run arbitrary code, install malware, or move laterally within the network. This issue has been patched in version 3.7.9."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-88",
              "description": "CWE-88: Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T02:55:51.285Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-q4p8-8j9m-8hxj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-q4p8-8j9m-8hxj"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/24ce7103e264cffe6eb5476c0506a2379e6f8333",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/24ce7103e264cffe6eb5476c0506a2379e6f8333"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.7.9",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.7.9"
        }
      ],
      "source": {
        "advisory": "GHSA-q4p8-8j9m-8hxj",
        "discovery": "UNKNOWN"
      },
      "title": "electerm: RCE via malicious SSH server filename in openFileWithEditor"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-43943",
    "datePublished": "2026-05-08T02:55:51.285Z",
    "dateReserved": "2026-05-04T16:59:09.090Z",
    "dateUpdated": "2026-05-08T14:44:16.203Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-41500 (GCVE-0-2026-41500)

Vulnerability from cvelistv5 – Published: 2026-05-08 02:53 – Updated: 2026-05-08 23:06

Title

electerm has Command Injection Vulnerability via runMac function

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:150. The runMac() function appends attacker-controlled remote releaseInfo.name directly into an exec("open ...") command without validation. This issue has been patched in version 3.3.8.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/59708…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.3.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-41500",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T23:06:11.862427Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T23:06:39.245Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.3.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:150. The runMac() function appends attacker-controlled remote releaseInfo.name directly into an exec(\"open ...\") command without validation. This issue has been patched in version 3.3.8."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77: Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T02:53:44.494Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-wxw2-rwmh-vr8f",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-wxw2-rwmh-vr8f"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/59708b38c8a52f5db59d7d4eff98e31d573128ee",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/59708b38c8a52f5db59d7d4eff98e31d573128ee"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.3.8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.3.8"
        }
      ],
      "source": {
        "advisory": "GHSA-wxw2-rwmh-vr8f",
        "discovery": "UNKNOWN"
      },
      "title": "electerm has Command Injection Vulnerability via runMac function"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-41500",
    "datePublished": "2026-05-08T02:53:44.494Z",
    "dateReserved": "2026-04-20T18:18:50.680Z",
    "dateUpdated": "2026-05-08T23:06:39.245Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-41501 (GCVE-0-2026-41501)

Vulnerability from cvelistv5 – Published: 2026-05-08 02:51 – Updated: 2026-05-08 11:19

Title

electerm has Command Injection Vulnerability via runLinux function

Summary

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:130. The runLinux() function appends attacker-controlled remote version strings directly into an exec("rm -rf ...") command without validation. This issue has been patched in version 3.3.8.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/electerm/electerm/security/adv…	x_refsource_CONFIRM
https://github.com/electerm/electerm/commit/59708…	x_refsource_MISC
https://github.com/electerm/electerm/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
electerm	electerm	Affected: < 3.3.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-41501",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T11:19:45.771219Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T11:19:54.297Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electerm",
          "vendor": "electerm",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.3.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:130. The runLinux() function appends attacker-controlled remote version strings directly into an exec(\"rm -rf ...\") command without validation. This issue has been patched in version 3.3.8."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77: Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T02:51:10.144Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electerm/electerm/security/advisories/GHSA-8x35-hph8-37hq",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electerm/electerm/security/advisories/GHSA-8x35-hph8-37hq"
        },
        {
          "name": "https://github.com/electerm/electerm/commit/59708b38c8a52f5db59d7d4eff98e31d573128ee",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/commit/59708b38c8a52f5db59d7d4eff98e31d573128ee"
        },
        {
          "name": "https://github.com/electerm/electerm/releases/tag/v3.3.8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electerm/electerm/releases/tag/v3.3.8"
        }
      ],
      "source": {
        "advisory": "GHSA-8x35-hph8-37hq",
        "discovery": "UNKNOWN"
      },
      "title": "electerm has Command Injection Vulnerability via runLinux function"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-41501",
    "datePublished": "2026-05-08T02:51:10.144Z",
    "dateReserved": "2026-04-20T18:18:50.680Z",
    "dateUpdated": "2026-05-08T11:19:54.297Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria

30 vulnerabilities found for electerm by electerm

CVE-2026-73227 (GCVE-0-2026-73227)

CVE-2026-73226 (GCVE-0-2026-73226)

CVE-2026-73225 (GCVE-0-2026-73225)

CVE-2026-73224 (GCVE-0-2026-73224)

CVE-2026-73223 (GCVE-0-2026-73223)

CVE-2026-45787 (GCVE-0-2026-45787)

CVE-2026-45353 (GCVE-0-2026-45353)

CVE-2026-45058 (GCVE-0-2026-45058)

CVE-2026-43944 (GCVE-0-2026-43944)

CVE-2026-43943 (GCVE-0-2026-43943)

CVE-2026-43942 (GCVE-0-2026-43942)

CVE-2026-43941 (GCVE-0-2026-43941)

CVE-2026-43940 (GCVE-0-2026-43940)

CVE-2026-41501 (GCVE-0-2026-41501)

CVE-2026-41500 (GCVE-0-2026-41500)

CVE-2026-73227 (GCVE-0-2026-73227)

CVE-2026-73226 (GCVE-0-2026-73226)

CVE-2026-73225 (GCVE-0-2026-73225)

CVE-2026-73224 (GCVE-0-2026-73224)

CVE-2026-73223 (GCVE-0-2026-73223)

CVE-2026-45058 (GCVE-0-2026-45058)

CVE-2026-45353 (GCVE-0-2026-45353)

CVE-2026-45787 (GCVE-0-2026-45787)

CVE-2026-43944 (GCVE-0-2026-43944)

CVE-2026-43942 (GCVE-0-2026-43942)

CVE-2026-43941 (GCVE-0-2026-43941)

CVE-2026-43940 (GCVE-0-2026-43940)

CVE-2026-43943 (GCVE-0-2026-43943)

CVE-2026-41500 (GCVE-0-2026-41500)

CVE-2026-41501 (GCVE-0-2026-41501)