CVE-2026-123014 | iTerm2 up to 3.7.7beta1 URL argument injection

November 5, 2026 Yanac

A vulnerability identified as critical has been detected in iTerm2 up to 3.7.7beta1. This impacts an unknown function of the component URL Handler. The manipulation leads to argument injection.

This vulnerability is listed as CVE-2026-123014. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More