Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-xb78-cnaa-1qfv
Vulnerability ID VCID-xb78-cnaa-1qfv
Aliases CVE-2026-43940
GHSA-f77v-9vpc-6pjm
Summary electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.16, the runWidget function in src/app/widgets/load-widget.js constructs a file path by directly concatenating user‑supplied widget identifiers without any sanitisation. Because runWidget is exposed to the renderer process via an asynchronous IPC handler with no input validation, an attacker who achieves JavaScript execution inside the renderer (for example, through a malicious plugin or a cross‑site scripting flaw in the built‑in webview) can abuse a path traversal (../) to load and execute an arbitrary JavaScript file anywhere on the victim’s filesystem. This gives the attacker local code execution with the full privileges of the electerm process, leading to complete system compromise. This issue has been patched in version 3.7.16.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-829 Inclusion of Functionality from Untrusted Control Sphere
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2026-43940
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2026-43940
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2026-43940
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2026-43940
cvssv3.1_qr CRITICAL https://github.com/advisories/GHSA-f77v-9vpc-6pjm
cvssv3.1 9.8 https://github.com/electerm/electerm
generic_textual CRITICAL https://github.com/electerm/electerm
cvssv3.1 8.4 https://github.com/electerm/electerm/releases/tag/v3.7.16
cvssv3.1 9.8 https://github.com/electerm/electerm/releases/tag/v3.7.16
generic_textual CRITICAL https://github.com/electerm/electerm/releases/tag/v3.7.16
ssvc Track https://github.com/electerm/electerm/releases/tag/v3.7.16
cvssv3.1 8.4 https://github.com/electerm/electerm/security/advisories/GHSA-f77v-9vpc-6pjm
cvssv3.1 9.8 https://github.com/electerm/electerm/security/advisories/GHSA-f77v-9vpc-6pjm
cvssv3.1_qr CRITICAL https://github.com/electerm/electerm/security/advisories/GHSA-f77v-9vpc-6pjm
generic_textual CRITICAL https://github.com/electerm/electerm/security/advisories/GHSA-f77v-9vpc-6pjm
ssvc Track https://github.com/electerm/electerm/security/advisories/GHSA-f77v-9vpc-6pjm
cvssv3.1 9.8 https://nvd.nist.gov/vuln/detail/CVE-2026-43940
generic_textual CRITICAL https://nvd.nist.gov/vuln/detail/CVE-2026-43940
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2026-43940
https://github.com/electerm/electerm
https://nvd.nist.gov/vuln/detail/CVE-2026-43940
GHSA-f77v-9vpc-6pjm https://github.com/advisories/GHSA-f77v-9vpc-6pjm
GHSA-f77v-9vpc-6pjm https://github.com/electerm/electerm/security/advisories/GHSA-f77v-9vpc-6pjm
v3.7.16 https://github.com/electerm/electerm/releases/tag/v3.7.16
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/electerm/electerm
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/electerm/electerm/releases/tag/v3.7.16
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/electerm/electerm/releases/tag/v3.7.16
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-08T12:52:37Z/ Found at https://github.com/electerm/electerm/releases/tag/v3.7.16
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/electerm/electerm/security/advisories/GHSA-f77v-9vpc-6pjm
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/electerm/electerm/security/advisories/GHSA-f77v-9vpc-6pjm
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-08T12:52:37Z/ Found at https://github.com/electerm/electerm/security/advisories/GHSA-f77v-9vpc-6pjm
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2026-43940
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.15373
EPSS Score 0.00048
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T16:41:18.484300+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2026/43xxx/CVE-2026-43940.json 38.6.0