https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:48:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-309260 EUVD-2026-309260 https://cve.radiocsirt.org/vuln/euvd-2026-309260 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43941 <p>electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, Electerm&#39;s terminal hyperlink handler passes any URL clicked in the terminal directly to shell.openExternal without any protocol validation. An attacker who controls terminal output (e.g., via a malicious SSH server, compromised remote host, or malicious plugin rendering terminal content) can thus achieve arbitrary code execution or local file access on the victim&#39;s machine, requiring only that the victim clicks a displayed link. At time of publication, there are no publicly available patches.</p> <p>electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, Electerm&#39;s terminal hyperlink handler passes any URL clicked in the terminal directly to shell.openExternal without any protocol validation. An attacker who controls terminal output (e.g., via a malicious SSH server, compromised remote host, or malicious plugin rendering terminal content) can thus achieve arbitrary code execution or local file access on the victim&#39;s machine, requiring only that the victim clicks a displayed link. At time of publication, there are no publicly available patches.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-43941 https://cve.radiocsirt.org/vuln/ghsa-fwf6-j56g-m97c <p><strong>Affected:</strong> npm: electerm</p> <p>### Impact</p> <p>Electerm&#39;s terminal hyperlink handler passes any URL clicked in the terminal directly to `shell.openExternal` without any protocol validation.</p> <p>When a user connects to a malicious SSH server, the attacker can print a crafted URI in the terminal output. If the victim clicks the link, `shell.openExternal` executes it using the operating system&#39;s default protocol handler.</p> <p>This can be abused to: - Trigger dangerous protocol handlers (`ms-msdt:`, `search-ms:`) for code execution - Open local files or network shares (`file://`, UNC paths) to leak NTLM hashes or exfiltrate data - Launch any installed application associated with a custom URI scheme</p> <p>An attacker who controls terminal output (e.g., via a malicious SSH server, compromised remote host, or malicious plugin rendering terminal content) can thus achieve arbitrary code execution or local file access on the victim&#39;s machine, requiring only that the victim clicks a displayed link.</p> <p>### Patches</p> <p>As of electerm v3.7.9, no official patch has been released. Users should monitor the project’s [GitHub releases](https://github.com/electerm/electerm/releases) and [security page](https://github.com/electerm/electerm/security) for an update addressing this issue.</p> <p>### Workarounds</p> <p>Until a patch is available: - Do not click on any links displayed in terminal sessions connected to untrusted servers. - If possible, disable hyperlink rendering in electerm&#39;s terminal settings. - Use a terminal multiplexer (e.g., tmux) or a separ…</p> <p><strong>Affected:</strong> npm: electerm</p> <p>### Impact</p> <p>Electerm&#39;s terminal hyperlink handler passes any URL clicked in the terminal directly to `shell.openExternal` without any protocol validation.</p> <p>When a user connects to a malicious SSH server, the attacker can print a crafted URI in the terminal output. If the victim clicks the link, `shell.openExternal` executes it using the operating system&#39;s default protocol handler.</p> <p>This can be abused to: - Trigger dangerous protocol handlers (`ms-msdt:`, `search-ms:`) for code execution - Open local files or network shares (`file://`, UNC paths) to leak NTLM hashes or exfiltrate data - Launch any installed application associated with a custom URI scheme</p> <p>An attacker who controls terminal output (e.g., via a malicious SSH server, compromised remote host, or malicious plugin rendering terminal content) can thus achieve arbitrary code execution or local file access on the victim&#39;s machine, requiring only that the victim clicks a displayed link.</p> <p>### Patches</p> <p>As of electerm v3.7.9, no official patch has been released. Users should monitor the project’s [GitHub releases](https://github.com/electerm/electerm/releases) and [security page](https://github.com/electerm/electerm/security) for an update addressing this issue.</p> <p>### Workarounds</p> <p>Until a patch is available: - Do not click on any links displayed in terminal sessions connected to untrusted servers. - If possible, disable hyperlink rendering in electerm&#39;s terminal settings. - Use a terminal multiplexer (e.g., tmux) or a separ…</p> https://cve.radiocsirt.org/vuln/ghsa-fwf6-j56g-m97c