iTerm2 vulnerabilities

4 published CVEs name iTerm2 among the affected products.

Critical 2High 1Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-123014
iTerm2 before 3.7.7beta2 has an argument injection vulnerability in the x-man-page: URL handler, allowing an attacker to execute arbitrary commands with the…
iTerm2 · iTerm2
High8.7
CVE-2026-41253
In iTerm2 through 3.6.9, displaying a .txt file can cause code execution via DCS 2000p and OSC 135 data, if the working directory contains a malicious file…
iTerm2 · iTerm2
Medium6.9
CVE-2025-22275
iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from terminal commands by reading the…
iTerm2 · iTerm2
Critical9.3
CVE-2019-9535
iTerm2, up to and including version 3.3.5, with tmux integration is vulnerable to remote command execution
iTerm2 · iTerm2
Critical9.8