PT-2026-38650 · Electerm · Electerm

Curly-Haired-Baboon · Published 2026-05-08 · Updated 2026-05-14 · CVE-2026-43944

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions electerm versions 3.0.6 through 3.8.14

Description Arbitrary local code execution can occur via deep links, CLI --opts, or crafted shortcuts. This happens when a user clicks a crafted electerm://... link or opens a crafted shortcut or command that launches the application with attacker-controlled opts.

Recommendations Update to version 3.8.15. Disable or unregister electerm protocol handlers (Deep Link settings) and avoid clicking electerm:// links. Avoid running the application with untrusted --opts arguments or opening .lnk or .desktop files from untrusted sources. Restrict which users can launch the application on shared machines and avoid installing it in locations reachable by other users. Run the application in a confined account or sandbox (non-admin user) to reduce impact.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-829

CWE-20

CWE-94

Related Identifiers

CVE-2026-43944

GHSA-MPM8-CX2P-626Q

Affected Products

Electerm

References · 11

• https://github.com/electerm/electerm/commit/a79e06f4a1f0ac6376c3d2411ef4690fa0377742 · Patch
• https://github.com/electerm/electerm/commit/8a6a17951e96d715f5a231532bbd8303fe208700 · Patch
• https://osv.dev/vulnerability/GHSA-mpm8-cx2p-626q · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43944 · Security Note
• https://github.com/electerm/electerm/commit/0599e67069b00e376a2e962649aaad6096e63507 · Note
• https://github.com/electerm/electerm · Note
• https://github.com/electerm/electerm/security/advisories/GHSA-mpm8-cx2p-626q · Vendor Advisory, Patch
• https://github.com/electerm/electerm/releases/tag/v3.8.15 · Note
• https://twitter.com/CVEnew/status/2053559130145653008 · Twitter Post
• https://t.me/CVEtracker/53054 · Telegram Post
• https://twitter.com/lyrie_ai/status/2054785319162052857 · Twitter Post