CVE-2026-49255

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.11.11, electerm constructs operating system commands in src/app/lib/fs.js by interpolating untrusted file paths into the rmrf(), mv(), and cp() functions. A malicious SSH or SFTP server can provide a filename containing quote characters and shell metacharacters, and a victim can cause that filename to reach the affected operation during remote-to-local transfer, conflict renaming, copying, moving, or removal. The generated `rm -rf`, mv, `cp -r`, PowerShell Remove-Item, Move-Item, or Copy-Item command can then interpret the filename as shell syntax. This allows arbitrary command execution with the electerm desktop user's privileges on POSIX and Windows systems, enabling data exfiltration, file modification, malware installation, or denial of service. This issue is fixed in version 3.11.11.

• CWE-78

• https://github.com/electerm/electerm/commit/aa778818843b9c083bd711cd04644d102fcb5a42
• https://github.com/electerm/electerm/releases/tag/v3.11.11
• https://github.com/electerm/electerm/security/advisories/GHSA-v5ff-xmfp-p245

Published

Aug 19, 2026

Last Modified

Sep 9, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-49249Boruta is a standalone authorization server that aims to imp…7.1
• CVE-2026-4925Improper access control in the users MFA feature in Devoluti…5
• CVE-2026-49250Conform, a type-safe form validation library, allows the par…8.7
• CVE-2026-49252deepstream is a server that allows clients and backend servi…9.9
• CVE-2026-49253electerm is an open-sourced terminal/ssh/sftp/telnet/serialp…7.1
• CVE-2026-49254Dragonfly is an open source P2P-based file distribution and …2.9
• CVE-2026-49256Discourse is an open-source discussion platform. Prior to 20…7.5
• CVE-2026-49257mcp-pinot is a Python-based Model Context Protocol (MCP) ser…10
• CVE-2026-49258Nebula Mesh is a self-hosted control plane for the Slack Neb…8.8
• CVE-2026-4926Impact: A bad regular expression is generated any time you …7.5
• CVE-2026-49260PhpWeasyPrint is a PHP library allowing PDF generation from …8.2
• CVE-2026-49261MariaDB server is a community developed fork of MySQL server…9.8