Security Advisory

CVE-2026-86711

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-08 11:23:04

Last updated 2026-09-08 12:17:37

Assigner VulnCheck

CVSS score 7.5

State PUBLISHED

Description

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the main process.

← Browse all CVEs View on cve.org ↗