CVE-2026-45037

Tabby (formerly Terminus) is affected prior to version 1.0.232. The terminal linkifier passes any detected URI directly to the OS protocol handler without validating the protocol scheme, allowing a malicious SSH or Telnet server to deliver crafted terminal output containing dangerous protocol URI...