CVE-2026-43943

The record

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code execution (RCE) vulnerability exists in electerm's SFTP open with system editor or "Edit with custom editor" feature. When a user opts to edit a file using open with system editor or open with a custom editor, the filename is passed directly into a command line without sanitization. A malicious actor controlling the SSH server or user OS can exploit this by crafting a filename containing shell metacharacters. If a victim subsequently attempts to edit this file, the injected commands are executed on their machine with the user's privileges. This could allow the attacker to run arbitrary code, install malware, or move laterally within the network. This issue has been patched in version 3.7.9.

Affected packages

Related vulnerabilities

• GHSA-q4p8-8j9m-8hxj Electerm Security Vulnerability: RCE via malicious SSH server filename in… Same vulnerability
• CVE-2026-45353 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Also affects electerm
• CVE-2026-45787 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Also affects electerm
• CVE-2026-45058 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Also affects electerm
• GHSA-g29v-q6h7-76wh electerm's encrypt method not safe enough Also affects electerm
• GHSA-7p5m-v798-f8vv Electerm Local code through electerm's single-instance socket Also affects electerm
• GHSA-jgg9-rw32-44pj Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking… Also affects electerm
• GHSA-mpm8-cx2p-626q Electerm users can run dangrous code through link or command line Also affects electerm