CVE-2026-41500

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:150. The runMac() function appends attacker-controlled remote releaseInfo.name directly into an exec("open ...") command without validation. This issue has been patched in version 3.3.8.

• CWE-77

• https://github.com/electerm/electerm/commit/59708b38c8a52f5db59d7d4eff98e31d573128eePatch
• https://github.com/electerm/electerm/releases/tag/v3.3.8Release Notes
• https://github.com/electerm/electerm/security/advisories/GHSA-wxw2-rwmh-vr8fPatch, Vendor Advisory

Published

May 8, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41495n8n-MCP is an MCP server that provides AI assistants access …5.3
• CVE-2026-41496PraisonAI is a multi-agent teams system. Prior to praisonai …8.1
• CVE-2026-41497PraisonAI is a multi-agent teams system. Prior to version 4.…9.8
• CVE-2026-41498Kimai is an open-source time tracking application. Prior to …3.3
• CVE-2026-41499Wazuh is a free and open source platform used for threat pre…6.5
• CVE-2026-4150GIMP PSD File Parsing Integer Overflow Remote Code Execution…7.8
• CVE-2026-41501electerm is an open-sourced terminal/ssh/sftp/telnet/serialp…9.8
• CVE-2026-41502BACnet Stack is a BACnet open source protocol stack C librar…7.5
• CVE-2026-41503BACnet Stack is a BACnet open source protocol stack C librar…7.5
• CVE-2026-41505RELATE is a web-based courseware package. Prior to commit 2f…8.7
• CVE-2026-41506go-git is an extensible git implementation library written i…7.4
• CVE-2026-41507math-codegen generates code from mathematical expressions. P…9.8