← All advisories

Critical severity9.8NVD Advisory· Published Oct 22, 2023· Updated Jun 17, 2026

CVE-2023-46301

CVE-2023-46301

Description

iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to upload.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Gnachman/Iterm23 versions
cpe:2.3:a:iterm2:iterm2:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:iterm2:iterm2:*:*:*:*:*:*:*:*range: <3.4.20
- (no CPE)
- (no CPE)range: <3.4.20

Patches

Vulnerability mechanics

References

4

github.com/gnachman/iTerm2/commit/85cbf5ebda472c9ec295887e99c2b6f1b5867f1bnvdPatch
github.com/gnachman/iTerm2/commit/b2268b03b5f3d4cd8ca275eaef5d16d0fac20009nvdPatch
blog.solidsnail.com/posts/2023-08-28-iterm2-rcenvdExploitThird Party Advisory
iterm2.com/news.htmlnvdRelease Notes

News mentions

0

No linked articles in our index yet.