CVE-2026-45036
Tabby auto-confirms ZMODEM detection on terminal output, leading to shell command execution from displayed file content under fish, bash, and zsh
Description
Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, Tabby before 1.0.233 automatically confirms ZMODEM protocol detection on all terminal session output without user interaction, enabling shell command execution when a user displays attacker-controlled content. The ZModemMiddleware in tabby-terminal consumes all session output through a Zmodem.Sentry, and when a ZMODEM ZRQINIT header is detected, unconditionally calls detection.confirm() and writes a fixed ZRINIT response ( **\x18B0100000023be50\r\n\x11) back into the active PTY as input. When the process that triggered the detection (e.g., cat) exits, the injected bytes are consumed by the user's shell as a command line. Under fish (default configuration), the ** prefix triggers recursive glob expansion against the current directory, allowing an attacker-placed executable at a matching nested path (e.g., d/xB0100000023be50) to be executed by relative pathname without relying on PATH. Under bash and zsh, a secondary xterm.js terminal color-query feedback (OSC 10) can be combined in the same file to inject a slash-containing command word that similarly bypasses PATH resolution. An attacker can exploit this by providing a crafted file (e.g., in a cloned Git repository) that a user displays with cat, achieving code execution with no interaction beyond viewing the file. This vulnerability is fixed in 1.0.233.
INFO
Published Date :
May 15, 2026, 5:16 p.m.
Last Modified :
Oct. 26, 2026, 2:10 p.m.
Remotely Exploit :
No
Source :
[email protected]
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 3.1 | HIGH | [email protected] | ||||
| CVSS 3.1 | HIGH | [email protected] |
Solution
- Update Tabby to version 1.0.233 or later.
- Ensure ZMODEM protocol handling is configured securely.
- Avoid displaying untrusted content in the terminal.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-45036.
| URL | Resource |
|---|---|
| https://github.com/Eugeny/tabby/security/advisories/GHSA-qr3x-j8g9-xhf6 | Mitigation Vendor Advisory |
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-45036 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-45036
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-45036 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-45036 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Translated by [email protected]
Oct. 26, 2026
Action Type Old Value New Value Added Translation Title: tabby de Eugeny, Description: Tabby (anteriormente Terminus) es un emulador de terminal altamente configurable. Antes de la versión 1.0.233, Tabby anterior a la versión 1.0.233 confirma automáticamente la detección del protocolo ZMODEM en toda la salida de la sesión de terminal sin interacción del usuario, permitiendo la ejecución de comandos de shell cuando un usuario muestra contenido controlado por el atacante. El ZModemMiddleware en tabby-terminal consume toda la salida de la sesión a través de un Zmodem.Sentry, y cuando se detecta una cabecera ZMODEM ZRQINIT, llama incondicionalmente a detection.confirm() y escribe una respuesta ZRINIT fija ( \x18B0100000023be50\r\n\x11) de vuelta en el PTY activo como entrada. Cuando el proceso que activó la detección (p. ej., cat) finaliza, los bytes inyectados son consumidos por el shell del usuario como una línea de comandos. Bajo fish (configuración predeterminada), el prefijo activa la expansión recursiva de glob contra el directorio actual, permitiendo que un ejecutable colocado por un atacante en una ruta anidada coincidente (p. ej., d/xB0100000023be50) sea ejecutado por nombre de ruta relativo sin depender de PATH. Bajo bash y zsh, una retroalimentación secundaria de consulta de color de terminal xterm.js (OSC 10) puede combinarse en el mismo archivo para inyectar una palabra de comando que contenga una barra que de manera similar omite la resolución de PATH. Un atacante puede explotar esto proporcionando un archivo manipulado (p. ej., en un repositorio Git clonado) que un usuario muestra con cat, logrando la ejecución de código sin interacción más allá de ver el archivo. Esta vulnerabilidad está corregida en la versión 1.0.233. -
CVE Modified by [email protected]
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'Eugeny', 'product': 'tabby', 'versions': [{'status': 'affected', 'version': '< 1.0.233'}]}] -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 17, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2026-45036', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'none'}, {'automatable': 'no'}, {'technicalImpact': 'total'}], 'version': '2.0.3', 'timestamp': '2026-05-20T03:55:46.102887Z'} -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
May. 20, 2026
Action Type Old Value New Value Removed Reference https://github.com/Eugeny/tabby/security/advisories/GHSA-qr3x-j8g9-xhf6 Removed Reference Type https://github.com/Eugeny/tabby/security/advisories/GHSA-qr3x-j8g9-xhf6 Types: Mitigation, Vendor Advisory -
Initial Analysis by [email protected]
May. 19, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Added CPE Configuration OR *cpe:2.3:a:tabby:tabby:*:*:*:*:*:*:*:* versions up to (excluding) 1.0.233 Added Reference Type CISA-ADP: https://github.com/Eugeny/tabby/security/advisories/GHSA-qr3x-j8g9-xhf6 Types: Mitigation, Vendor Advisory Added Reference Type GitHub, Inc.: https://github.com/Eugeny/tabby/security/advisories/GHSA-qr3x-j8g9-xhf6 Types: Mitigation, Vendor Advisory -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
May. 15, 2026
Action Type Old Value New Value Added Reference https://github.com/Eugeny/tabby/security/advisories/GHSA-qr3x-j8g9-xhf6 -
New CVE Received by [email protected]
May. 15, 2026
Action Type Old Value New Value Added Description Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, Tabby before 1.0.233 automatically confirms ZMODEM protocol detection on all terminal session output without user interaction, enabling shell command execution when a user displays attacker-controlled content. The ZModemMiddleware in tabby-terminal consumes all session output through a Zmodem.Sentry, and when a ZMODEM ZRQINIT header is detected, unconditionally calls detection.confirm() and writes a fixed ZRINIT response ( **\x18B0100000023be50\r\n\x11) back into the active PTY as input. When the process that triggered the detection (e.g., cat) exits, the injected bytes are consumed by the user's shell as a command line. Under fish (default configuration), the ** prefix triggers recursive glob expansion against the current directory, allowing an attacker-placed executable at a matching nested path (e.g., d/xB0100000023be50) to be executed by relative pathname without relying on PATH. Under bash and zsh, a secondary xterm.js terminal color-query feedback (OSC 10) can be combined in the same file to inject a slash-containing command word that similarly bypasses PATH resolution. An attacker can exploit this by providing a crafted file (e.g., in a cloned Git repository) that a user displays with cat, achieving code execution with no interaction beyond viewing the file. This vulnerability is fixed in 1.0.233. Added CVSS V3.1 AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Added CWE CWE-78 Added Reference https://github.com/Eugeny/tabby/security/advisories/GHSA-qr3x-j8g9-xhf6