CVE-2026-43940
high
CVSS v3
8.4
CVSS v2
—
VIR risk
8.4
Description
Electerm runWidget has a path traversal that leads to arbitrary code execution
Predictions
Exploit likelihood
90%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: security-advisories@github.com — https://github.com/electerm/electerm/security/advisories/GHSA-f77v-9vpc-6pjm
Vendor advisory: security-advisories@github.com — https://github.com/electerm/electerm/releases/tag/v3.7.16
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| electerm_project | electerm | {"endExcluding":"3.7.16"} | 3.7.16 |
References
CWEs
CWE-22 CWE-829
Verify integrity in audit chain (admin only). AS-IS.