CVE-2026-49253 electerm CVE debrief

Who should care

Users of electerm versions prior to 3.11.11, especially those who frequently download files from untrusted SSH servers or remote shells, should prioritize updating to version 3.11.11. This update will prevent potential file overwrites due to the path traversal issue. Additionally, users should restrict download directories to sensitive areas and monitor for suspicious file modifications. Desktop users of electerm should be cautious when accepting file transfers from untrusted sources. Security teams should review their deployment and ensure that all instances are updated to version 3.11.11 or later. Vulnerability management teams should track exceptions and retest remediated assets to ensure the issue is fully resolved. IT teams should also review compensating controls for exposed systems while remediation is scheduled and verified. Asset inventory management should be updated to reflect the affected systems and their current patch status. Monitoring and detection teams should check relevant logs for exposed assets that need extra review. Rollback/change windows should be planned for updates to ensure minimal disruption. Source tracking should be implemented to verify the source of the vulnerability and any potential mitigations. The CVE record indicates that electerm versions prior to 3.11.11 are vulnerable to a path traversal issue, which could allow a malicious SSH server or remote shell to write outside the user-selected download directory, potentially overwriting sensitive files. The issue is fixed in version 3.11.11, and users should update to this version or later to prevent exploitation. The vulnerability has a CVSS score of 7.1 and is classified as HIGH severity. The CVE record was published on 2026-08-19T15:17:06.747Z and has not been modified since then. The NVD detail and CVE record provide further information on the vulnerability and its impact. Users should review these resources to understand the affected scope, severity, and vendor guidance. The vulnerability affects electerm versions prior to 3.11.11, and users should review their deployment to ensure they are not exposed. The issue is a path traversal vulnerability that allows a malicious SSH/T

Technical summary

The electerm application, a terminal/SSH/SFTP client, is vulnerable to a path traversal issue prior to version 3.11.11. The application uses remote-supplied filenames directly with path.join() during file transfers, allowing a malicious server to write outside the intended download directory. This could lead to sensitive file overwrites. The vulnerability has a CVSS score of 7.1 and is classified as HIGH severity. Users of electerm versions prior to 3.11.11 should update to prevent potential file overwrite.

Defensive priority

Desktop users of electerm should prioritize updating to version 3.11.11 to prevent potential file overwrite.

Recommended defensive actions

• Update electerm to version 3.11.11 or later
• Restrict download directories to sensitive areas
• Monitor for suspicious file modifications
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed

Evidence notes

The CVE record indicates that electerm versions prior to 3.11.11 are vulnerable to a path traversal issue. The issue arises from the application's use of remote-supplied filenames directly with path.join() during Zmodem and Trzsz transfers. This could allow a malicious SSH server or remote shell to write outside the user-selected download directory, potentially overwriting sensitive files.

Official resources