CVE-2023-46300

CRITICAL

iTerm2 < 3.4.20 - Remote Code Execution via tmux Escape Sequence Mishandling

Title source: llm
STIX 2.1

Description

iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to tmux integration.

References (4)

Core 4

Scores

CVSS v3 9.8
EPSS 0.0118
EPSS Percentile 63.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-116
Status published
Products (1)
iterm2/iterm2 < 3.4.20
Published Oct 22, 2023
Tracked Since Feb 18, 2026