Tabby

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Tabby records in CISA KEV

No Tabby vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tabby 5 records HIGH

Records

5 records

TI-2026-32886 CVE-2026-45035

Tabby: RCE via `tabby://run` URL Scheme

HIGH 76

Tabby (formerly Terminus) is a highly configurable terminal emulator.

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.0038 Published 2026-05-15 Fixed in 1.0.233 CWE-78

TI-2026-34334 CVE-2026-46709

Tabby: Drag-and-drop path injection still allows RCE via shell command substitution (incomplete fix for CVE-2026-45038)

HIGH 69

Tabby (formerly Terminus) is a highly configurable terminal emulator.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00252 Published 2026-07-15 Fixed in 1.0.234 CWE-77

TI-2026-32889 CVE-2026-45038

Tabby: Dragging and Dropping a File into Tabby Can Lead to Code Execution

LOW 38

Tabby (formerly Terminus) is a highly configurable terminal emulator.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00178 Published 2026-05-15 Fixed in 1.0.233 CWE-150

TI-2026-32887 CVE-2026-45036

OS command injection in Eugeny tabby

LOW 32

Tabby (formerly Terminus) is a highly configurable terminal emulator.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.0013 Published 2026-05-15 Fixed in 1.0.233 CWE-78

TI-2026-32888 CVE-2026-45037

Tabby: Unsafe protocol handler execution via terminal linkifier allows arbitrary OS protocol invocation

LOW 30

Tabby (formerly Terminus) is a highly configurable terminal emulator.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00137 Published 2026-05-15 Fixed in 1.0.232 CWE-184

Open these records in search →