PT-2025-11956 · Electron+1 · Electron+1

Published 2025-03-19 · Updated 2025-03-19 · CVE-2024-57061

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Termius versions 9.9.0 through 9.16.0

Description The issue allows a physically proximate attacker to execute arbitrary code via the insecure Electron Fuses configuration.

Recommendations For Termius versions 9.9.0 through 9.16.0, update to a version that addresses the insecure Electron Fuses configuration issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-57061

Affected Products

Electron

Termius

References · 6

• 🔥 https://sha999.medium.com/cve-2024-57061-termius-insufficient-electron-fuses-configuration-limited-disclosure-ab00d0970159 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-57061 · Security Note
• https://book.hacktricks.xyz/macos-hardening/macos-security-and-privilege-escalation/macos-proces-abuse/macos-electron-applications-injection · Note
• https://twitter.com/CVEnew/status/1902431697402212830 · Twitter Post
• https://t.me/cvetracker/19469 · Telegram Post
• https://electron.build/tutorials/adding-electron-fuses.html · Note