CVE-2026-86711— electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge
Quick assessment
Affected
electerm electerm
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Electron 终端（electerm）在 5.3.15 版本之前，通过一个未经校验的 Electron IPC 处理程序暴露了 40 多个主进程函数，该处理程序既没有函数名白名单，也没有发送者验证。渲染进程中的脚本执行可以调用 openFileWithEditor 等其他函数，并传入任意参数，从而在主进程中执行系统命令。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-86711
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge
Source: CVE Program / CVE List V5
Vulnerability Description
electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the main process.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
暴露危险的方法或函数
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-86711
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-86711
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-86711 (2)
-
-
🔗 electerm/src/app/lib/ipc.js at v5.3.5 · electerm/electerm · GitHub Read full article technical-description
Vendor Advisories for CVE-2026-86711 (2)
Proof of Concept for CVE-2026-86711 (1)
Vendor Pages for CVE-2026-86711 (1)
-
🔗 Release v5.3.15 · electerm/electerm · GitHub release-notes
Other References for CVE-2026-86711 (1)
IV. Related Vulnerabilities
Same product: electerm
-
CVE-2026-49253
electerm: Path Traversal in Zmodem and Trzsz Download Filena -
CVE-2026-49255
electerm: Command Injection in File System Operations (rmrf, -
CVE-2026-73227
electerm's RDP clipboard file download may parse unsafe file -
CVE-2026-73226
Electerm WebSocket `upgrade-func` and `fs` handlers allow ar -
CVE-2026-73225
electerm: Path traversal in FTP/SFTP recursive folder downlo
Same vendor: electerm
-
CVE-2026-49253
electerm: Path Traversal in Zmodem and Trzsz Download Filena -
CVE-2026-49255
electerm: Command Injection in File System Operations (rmrf, -
CVE-2026-73227
electerm's RDP clipboard file download may parse unsafe file -
CVE-2026-73226
Electerm WebSocket `upgrade-func` and `fs` handlers allow ar -
CVE-2026-73225
electerm: Path traversal in FTP/SFTP recursive folder downlo
Same weakness: CWE-749
-
CVE-2026-20293
Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot By -
CVE-2026-75810
ASUS Armoury Crate危险函数致系统挂起 -
CVE-2026-18263
Parallels RAS Client RDP Backend Service Exposed Dangerous F -
CVE-2026-18262
Parallels RAS Client RDP Backend Service Exposed Dangerous F -
CVE-2026-13121
Parallels RAS Client RDP Backend Service Exposed Dangerous F
V. Comments for CVE-2026-86711
No comments yet