CVE-2026-73223

Received Received - Intake

Path Traversal in Electerm via SFTP Server

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: GitHub, Inc.

Description

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious SFTP server to write attacker-controlled content outside the temporary directory because the server-controlled filename name used by editWithSystemEditor in src/client/components/sftp/file-item.jsx is interpolated into path.resolve without sanitization. This issue is fixed in version 3.15.120.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-73223

EUVD

EUVD-2026-56907

Affected Vendors & Products

Vendor	Product	Version / Range
electerm	electerm	to 3.15.120 (exc)
electerm	electerm	to 3.15.110 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability is a path traversal issue in the electerm application. It occurs when a malicious SFTP server sends a specially crafted filename that includes path traversal sequences like slashes or double dots. The application then uses this unsanitized filename to create a temporary file path without proper validation, allowing the attacker to write files outside the intended temporary directory.

Detection Guidance

Check if your electerm version is below 3.15.120 by running: electerm --version. If vulnerable, inspect SFTP server connections for unusual file writes outside temporary directories. Monitor system logs for unauthorized file creation attempts in sensitive paths.

Impact Analysis

An attacker could exploit this to write arbitrary files on your system, potentially leading to code execution if malicious files are run. It could also allow overwriting important system files or sensitive user data, depending on the permissions of the electerm application.

Compliance Impact

This vulnerability could lead to unauthorized file writes, potentially violating data integrity and confidentiality requirements under GDPR and HIPAA. If exploited, it may result in unauthorized access to or modification of sensitive data, leading to compliance violations and legal consequences.

Mitigation Strategies

Upgrade electerm to version 3.15.120 or later immediately. Disable the 'Edit with System Editor' feature for SFTP connections until patched. Review and restrict write permissions on temporary directories used by electerm.

Hi! I’m here to help you understand CVE-2026-73223. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70