Wave Terminal CVE-2025-12843

Exploitation requires local access to a macOS system running Wave Terminal version 0.12.2 (AV:L) with low-level privileges already present (PR:L) - it is not remotely reachable and requires no user interaction (UI:N). The specific prerequisite is the application's insecure Electron Fuses configuration (e.g., Fuses such as RunAsNode, EnableNodeCliInspectArguments, or EnableNodeOptionsEnvironmentVariable left enabled), which allows an attacker to inject Node.js/JavaScript code into the signed Electron binary and thereby inherit its macOS TCC permissions to bypass privacy consent prompts. Limiting factors that reduce real-world risk: the attacker must already be executing locally on the target macOS machine, the flaw is confined to the macOS platform, and only version 0.12.2 is listed as affected.

This is a moderate-severity, locally-exploitable code injection flaw (CVSS 4.0 base 6.9, CWE-94) in Wave Terminal 0.12.2 on macOS, stemming from insecure Electron Fuses configuration that permits code injection and a subsequent TCC (Transparency, Consent, and Control) bypass. The CVSS vector (AV:L/AC:L/PR:L/UI:N) confirms the attacker must already have local, low-privileged access to the machine - this is not a remotely exploitable network vulnerability, which materially caps its real-world urgency. Public exploit code exists (Fluid Attacks advisory), raising practical reproducibility, but EPSS is very low at 0.21% (11th percentile) and the CVE is NOT in CISA KEV, indicating no evidence of active exploitation. The signals are internally consistent: a local-only, privilege-requiring issue with a published PoC but low exploitation probability points to a targeted post-compromise privilege/permission-escalation primitive (abusing macOS TCC to access protected resources like camera, files, or Full Disk Access) rather than a mass-exploitation threat. Net: a legitimate issue worth patching for macOS Wave Terminal users, but a lower priority than any network-facing or KEV-listed vulnerability.

A local attacker or malicious process with low privileges on a macOS host running Wave Terminal 0.12.2 abuses the insecurely configured Electron Fuses to inject code into the signed application, inheriting its TCC permissions and bypassing macOS privacy controls to reach protected resources. Public exploit code is available via the Fluid Attacks advisory, lowering the barrier to reproduction. Because the attack is local (AV:L) and requires existing low-level access (PR:L), it functions as a post-compromise escalation rather than an initial-access vector.