VYPR
← All advisories
Critical severity9.3NVD Advisory· Published Jan 3, 2025· Updated Jun 17, 2026

CVE-2025-22275

CVE-2025-22275

Description

iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from terminal commands by reading the /tmp/framer.txt file. This can occur for certain it2ssh and SSH Integration configurations, during remote logins to hosts that have a common Python installation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Gnachman/Iterm23 versions
    cpe:2.3:a:iterm2:iterm2:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:iterm2:iterm2:*:*:*:*:*:*:*:*range: >=3.5.6,<3.5.11
    • (no CPE)range: <3.5.11
    • (no CPE)range: 3.5.6

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.