Local Information Disclosure Vulnerability in iTerm2 for macOS
CVE-2026-88514

5.5MEDIUM

Key Information:

Vendor

iTerm2

Status
iTerm2
Vendor
CVE Published:
7 October 2026

What is CVE-2026-88514?

A local information disclosure vulnerability exists in iTerm2 for macOS prior to version 3.6.12. This flaw allows an unauthorized local attacker to access sensitive information unintentionally exposed by the application. Exploitation of this vulnerability could lead to unauthorized disclosure of user information, making it essential for users to upgrade to the latest version to safeguard their data.

References

https://github.com/gnachman/iTerm2/commit/1260814ac9c12ae...
https://gist.github.com/NSEcho/4b8e82450944c2bdbf042c990a...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.