CVE-2026-45038

CVSS Score & Metrics

Base Score

7.8 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H                                    

Vulnerability Description

Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, since Tabby does not escape control characters from file paths when dragging and dropping a file into it, code execution can be achieved. This vulnerability is fixed in 1.0.233.

Vulnerability Details

Published Date

May 15, 2026

Last Modified

May 20, 2026

CWE ID

CWE-150

Source

NVD

Vendor

Eugeny

Product

tabby

External References

https://github.com/Eugeny/tabby/security/advisories/GHSA-m937-jm93-pfp6

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment