Vulnerabilities

TI-2026-34334 CVE-2026-46709

Tabby: Drag-and-drop path injection still allows RCE via shell command substitution (incomplete fix for CVE-2026-45038)

HIGH 69

Tabby (formerly Terminus) is a highly configurable terminal emulator.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00252 Published 2026-07-15 Fixed in 1.0.234 CWE-77

TI-2026-32889 CVE-2026-45038

LOW 38

Tabby (formerly Terminus) is a highly configurable terminal emulator.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00178 Published 2026-05-15 Fixed in 1.0.233 CWE-150

TI-2026-32887 CVE-2026-45036

LOW 32

Tabby (formerly Terminus) is a highly configurable terminal emulator.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.0013 Published 2026-05-15 Fixed in 1.0.233 CWE-78

TI-2026-32886 CVE-2026-45035

HIGH 76

Tabby (formerly Terminus) is a highly configurable terminal emulator.

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.0038 Published 2026-05-15 Fixed in 1.0.233 CWE-78

TI-2026-32888 CVE-2026-45037

LOW 30

Tabby (formerly Terminus) is a highly configurable terminal emulator.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00137 Published 2026-05-15 Fixed in 1.0.232 CWE-184