Security Advisory

CVE-2026-46709

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-15 14:59:18

Last updated 2026-07-16 03:55:43

Assigner GitHub_M

CVSS score 7.8

State PUBLISHED

Description

Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.234, Tabby inserts dropped file paths from tabby-electron/src/pathDrop.ts into the active shell without neutralizing command substitution metacharacters such as $(…) and `…`, so the incomplete CVE-2026-45038 fix for control characters still allows code execution when the victim presses Enter. This issue is fixed in version 1.0.234.

← Browse all CVEs View on cve.org ↗