Wave Terminal
Monthly
Local code injection in Wave Terminal 0.12.2 on macOS allows an attacker with low-level privileges to inject Node.js/JavaScript into the signed Electron binary via insecure Electron Fuses, bypassing macOS TCC privacy prompts without user interaction. Publicly available exploit code exists, though the EPSS score is low (0.21%). The vulnerability is not known to be actively exploited and is confined to macOS.
Local code injection in Wave Terminal 0.12.2 on macOS allows an attacker with low-level privileges to inject Node.js/JavaScript into the signed Electron binary via insecure Electron Fuses, bypassing macOS TCC privacy prompts without user interaction. Publicly available exploit code exists, though the EPSS score is low (0.21%). The vulnerability is not known to be actively exploited and is confined to macOS.