Critical · 9.3 CVE-2026-45353 EUVD-2026-32960GHSA-7p5m-v798-f8vv

electerm: Local code through electerm's single-instance socket

Published May 28, 2026 · Updated May 28, 2026 · Assigned by GitHub_M

Description

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vulnerability is fixed in 3.9.0.

Vendor	Product	Affected	Fixed
electerm	electerm	>= 3.0.6, < 3.89.0	—

Ecosystem	Package	Affected	Fixed	Record
npm	electerm	>= 3.0.6, < 3.9.0	3.9.0	GHSA-7p5m-v798-f8vv