CVE-2026-88514: Infoleak
Published Oct 7, 2026
·Updated
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information.
Affected Software
1 affected component
iTerm2 iTerm2<3.6.12
Event History
Oct 7, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker needs local access to the affected macOS system and low-level privileges. The issue does not require user interaction.
2
Which installations are affected?
iTerm2 versions before 3.6.12 are affected. Systems running 3.6.12 or later are not identified as affected by the provided information.
3
What is the impact of successful exploitation?
A successful local attacker can obtain sensitive information. The supplied CVSS vector indicates confidentiality impact only, with no stated integrity or availability impact.