CVE-2026-73223

CVE-2026-73223 affects electerm: an open-source terminal/SSH/SFTP client. The issue is a path traversal in the SFTP workflow: the filename used by editWithSystemEditor (in src/client/components/sftp/file-item.jsx) is interpolated into path.resolve without sanitization, allowing a malicious SFTP s...