CVE-2026-73223
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
electerm before version 3.15.120 allows a malicious SFTP server to write attacker-controlled content outside the temporary directory. This is because the server-controlled filename used by editWithSystemEditor is interpolated into path.resolve without sanitization. The issue is fixed in version 3.15.120.
Risk Assessment
An attacker can overwrite arbitrary files on the user's system, potentially leading to data corruption or injection of malicious code.
Recommendation
Update electerm to version 3.15.120 or later to prevent unauthorized file writes.
Original NVD description (English source)
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious SFTP server to write attacker-controlled content outside the temporary directory because the server-controlled filename name used by editWithSystemEditor in src/client/components/sftp/file-item.jsx is interpolated into path.resolve without sanitization. This issue is fixed in version 3.15.120.