CVE-2026-73223: electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious SFTP server to write attacker-controlled content outside the temporary directory because the server-controlled filename name used by editWithSystemEditor in src/client/components/sftp/file-item.jsx is interpolated into path.resolve without sanitization. This issue is fixed in version 3.15.120.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
electermto a version that resolves this vulnerability.Fixed in 3.15.120
Event History
Frequently Asked Questions
What is the severity of CVE-2026-73223?
CVE-2026-73223 has a severity rating of high at 8.1.
How do I fix CVE-2026-73223?
To fix CVE-2026-73223, update electerm to version 3.15.120 or later.
What is the impact of CVE-2026-73223?
CVE-2026-73223 allows a malicious SFTP server to write attacker-controlled content outside the temporary directory.
What is the vulnerable software for CVE-2026-73223?
The vulnerable software for CVE-2026-73223 is electerm prior to version 3.15.120.
What type of vulnerability is CVE-2026-73223 classified as?
CVE-2026-73223 is classified as a Path Traversal vulnerability.