CyberRota Analysis
AI-GeneratedElecterm versions prior to 5.3.15 are vulnerable due to an unvalidated Electron IPC handler that exposes over 40 main-process functions, allowing unauthorized renderer-side scripts to execute system commands with arbitrary arguments. This vulnerability can lead to significant security risks, including remote code execution and system compromise. Organizations using affected versions should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the main process.