CVE-2026-73227: electerm's RDP clipboard file download may parse unsafe file name
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious RDP server to write attacker-controlled content outside the selected save directory because the RDP clipboard download path in src/client/components/rdp/file-transfer.js passes the server-controlled CLIPRDR filename fileInfo.name to osResolve without sanitization. This issue is fixed in version 3.15.120.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
electermto a version that resolves this vulnerability.Fixed in 3.15.120
Event History
Frequently Asked Questions
What is the severity of CVE-2026-73227?
CVE-2026-73227 has a high severity rating of 8.1.
What is the risk associated with CVE-2026-73227?
CVE-2026-73227 carries a risk score of 59, indicating significant potential impact.
How do I fix CVE-2026-73227?
To fix CVE-2026-73227, upgrade to electerm version 3.15.120 or later.
What type of vulnerability is CVE-2026-73227?
CVE-2026-73227 is a path traversal vulnerability allowing unauthorized file writes.
What impact does CVE-2026-73227 have on users?
CVE-2026-73227 can allow a malicious RDP server to write files outside the intended save directory.