CVE-2025-12843: Code Injection in Wave Term v0.12.2 allowing TCC Bypass
Published Dec 12, 2025
·Updated
Code Injection using Electron Fuses in waveterm on MacOS allows TCC Bypass. This issue affects waveterm: 0.12.2.
Affected Software
3 affected components
npm/waveterm
All of the following
waveterm Wave Terminal=0.12.2
Apple macOS
Event History
Dec 12, 2025
CVE Published
via MITRE·03:23 PM
Data Sourced
via MITRE·03:23 PM
DescriptionWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-12843?
CVE-2025-12843 is classified as a high severity vulnerability due to the potential for code injection and TCC bypass.
2
How do I fix CVE-2025-12843?
To fix CVE-2025-12843, update waveterm to the latest version that includes a patch addressing this vulnerability.
3
What impact does CVE-2025-12843 have on MacOS users?
CVE-2025-12843 allows code injection that can lead to unauthorized access or execution of malicious code on MacOS systems.
4
Who is affected by CVE-2025-12843?
Users of waveterm version 0.12.2 on MacOS are affected by CVE-2025-12843.
5
What should I do if I can't update waveterm due to compatibility issues related to CVE-2025-12843?
If you cannot update waveterm, consider implementing additional security measures to mitigate the risk associated with CVE-2025-12843.