RCE in Eugeny Tabby
CVE-2025-22136
Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.217 , Tabby enables several high-risk Electron Fuses, including RunAsNode, EnableNodeCliInspectArguments, and EnableNodeOptionsEnvironmentVariable. These fu…
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.004 (27.4th percentile) — read the EPSS interpretation.
Affected products
- Eugeny Tabby — versions < 1.0.217
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)