VYPR
Unrated severityOSV Advisory· Published Dec 12, 2025· Updated Dec 18, 2025

Code Injection in Wave Term v0.12.2 allowing TCC Bypass

CVE-2025-12843

Description

Code Injection using Electron Fuses in waveterm on MacOS allows TCC Bypass. This issue affects waveterm: 0.12.2.

Affected products

2
  • Wavetermdev/WavetermOSV2 versions
    v0.10.0, v0.10.0-beta.0, v0.10.0-beta.1, …+ 1 more
    • (no CPE)range: v0.10.0, v0.10.0-beta.0, v0.10.0-beta.1, …
    • (no CPE)range: =0.12.2

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.