Electerm Project Electerm vulnerabilities

• electerm electerm's encrypt method not safe enough CVE-2026-45787 Fix available 6.0 MediumMay 14, 2026
• electerm electerm: Local code through electerm's single-instance socket CVE-2026-45353 Fix available 9.3 CriticalMay 14, 2026
• electerm electerm: dangerous code can be run through links or command line CVE-2026-43944 Fix available 9.4 CriticalMay 8, 2026
• electerm electerm: Full process.env exposed to renderer via window.pre.env in electerm CVE-2026-43942 5.5 MediumMay 8, 2026
• electerm Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click CVE-2026-43941 9.6 CriticalMay 8, 2026
• electerm electerm: Path traversal in electerm runWidget leads to arbitrary code execution CVE-2026-43940 Fix available 8.4 HighMay 8, 2026
• electerm electerm: RCE via malicious SSH server filename in openFileWithEditor CVE-2026-43943 Fix available 7.8 HighMay 8, 2026
• electerm electerm has Command Injection Vulnerability via runLinux function CVE-2026-41501 Fix available 9.8 CriticalApril 24, 2026
• electerm electerm has Command Injection Vulnerability via runMac function CVE-2026-41500 Fix available 9.8 CriticalApril 16, 2026
• electerm project electerm electerm allows unauthorized users to execute arbitrary commands CVE-2020-23256 9.8 CriticalJanuary 20, 2023