Electerm Arbitrary Local Code Execution Vulnerability

A vulnerability allowing arbitrary local code execution has been identified in Electerm versions 3.0.6 prior to 3.8.15. This issue arises from the application's handling of deep links, command-line options, and shortcuts, which can be exploited by clicking a crafted Electerm link or opening a shortcut that launches Electerm with attacker-controlled options.

Impact

Exploitation of this vulnerability allows for arbitrary local code execution on the affected system.

Remediation

Users can update to Electerm version 3.8.15 or later, where this vulnerability has been patched. Instructions for downloading the latest version are available on the Electerm GitHub Releases page.