{"cve":"CVE-2026-43943","nvd":{"published":"2026-05-08T04:16:23.837","modified":"2026-06-17T10:50:06.290","status":"Analyzed","description":"electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code execution (RCE) vulnerability exists in electerm's SFTP open with system editor or \"Edit with custom editor\" feature. When a user opts to edit a file using open with system editor or open with a custom editor, the filename is passed directly into a command line without sanitization. A malicious actor controlling the SSH server or user OS can exploit this by crafting a filename containing shell metacharacters. If a victim subsequently attempts to edit this file, the injected commands are executed on their machine with the user's privileges. This could allow the attacker to run arbitrary code, install malware, or move laterally within the network. This issue has been patched in version 3.7.9.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","score":7.8},"cwes":["CWE-78","CWE-88"],"references":["https://github.com/electerm/electerm/commit/24ce7103e264cffe6eb5476c0506a2379e6f8333","https://github.com/electerm/electerm/releases/tag/v3.7.9","https://github.com/electerm/electerm/security/advisories/GHSA-q4p8-8j9m-8hxj"],"products":["electerm_project:electerm"],"source":"nvd","synced_at":"2026-10-19T22:33:55.586217763+00:00"},"epss":{"cve":"CVE-2026-43943","score":0.00165,"percentile":0.05693,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-q4p8-8j9m-8hxj","url":"https://osv.dev/vulnerability/GHSA-q4p8-8j9m-8hxj","summary":"Electerm Security Vulnerability: RCE via malicious SSH server filename in openFileWithEditor","modified":"2026-05-08T19:11:29.526006Z","packages":[{"ecosystem":"npm","name":"electerm","purl":"pkg:npm/electerm","ranges":["<3.7.9"],"fixed":["3.7.9"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}