Skip to content

CVE-2026-45353

CVE-2026-45353 · electerm: Local code through electerm's single-instance socket

This page contains facts from public vulnerability sources. Check the original advisory before updating.

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vulnerability is fixed in 3.9.0.

CVSS 9.3 · Critical · EPSS 0.1% · Fix available

Published: 2026-05-28T17:19:17.496Z
Updated: 2026-05-28T19:27:52.948Z

Stack: node

Affected products and versions

electerm
Versions
- >= 3.0.6, < 3.89.0: Affected
No fix published
electerm npm
Affected ranges
- SEMVER: ≥ 3.0.6, < 3.9.0
Update to 3.9.0

Original sources

Check your server →