Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2026-43942— electerm: Full process.env exposed to renderer via window.pre.env in electerm

CVSS 5.5 · Medium EPSS 0.01% · P1
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-43942

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
electerm: Full process.env exposed to renderer via window.pre.env in electerm
Source: NVD (National Vulnerability Database)
Vulnerability Description
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, the getConstants() IPC handler in src/app/lib/ipc-sync.js serialises the entire process.env object and sends it to the renderer. The data is stored as window.pre.env and is accessible from any JavaScript running in the renderer (e.g., via the DevTools console or a compromised webview context). An attacker who achieves any JavaScript execution within the renderer can trivially exfiltrate these secrets to a remote server, leading to cloud account compromise, supply chain attacks, and lateral movement. At time of publication, there are no publicly available patches.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
信息暴露
Source: NVD (National Vulnerability Database)
Vulnerability Title
Electerm 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Electerm是中国zxdong262个人开发者的一款基于 electron 开发的 SSH/SFTP 客户端。 Electerm 3.8.15及之前版本存在信息泄露漏洞，该漏洞源于getConstants IPC处理器序列化整个process.env对象并发送给渲染进程，可能导致攻击者通过JavaScript执行泄露环境变量中的敏感信息，导致云账户破解、供应链攻击和横向移动。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
electermelecterm <= 3.8.15 -

II. Public POCs for CVE-2026-43942

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-43942

请登录查看更多情报信息。

Same Patch Batch · electerm · 2026-05-08 · 7 CVEs total

CVE-2026-415019.8 CRITICALelecterm has Command Injection Vulnerability via runLinux function
CVE-2026-415009.8 CRITICALelecterm has Command Injection Vulnerability via runMac function
CVE-2026-439419.6 CRITICALUnvalidated shell.openExternal in electerm allows arbitrary protocol execution via termina
CVE-2026-439408.4 HIGHelecterm: Path traversal in electerm runWidget leads to arbitrary code execution
CVE-2026-439437.8 HIGHelecterm: RCE via malicious SSH server filename in openFileWithEditor
CVE-2026-43944electerm: dangerous code can be run through links or command line

IV. Related Vulnerabilities

Same product: electerm
Same vendor: electerm
Same weakness: CWE-200

V. Comments for CVE-2026-43942

No comments yet

Leave a comment