CVE-2026-105292Published
Chaterm before 0.12.1 Login CSRF via chaterm:// OAuth Callback
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-105292 · Microsoft / collected KEV context
cve-program · CVE-2026-105292
- https://github.com/Chaterm/Chaterm/pull/2326
- https://github.com/Chaterm/Chaterm/commit/41f747f17845cd980f289cc9ea8ff9978b6f7ad6
- https://github.com/Chaterm/Chaterm
- https://github.com/Chaterm/Chaterm/releases/tag/v0.12.1
- https://github.com/Chaterm/Chaterm/blob/v0.12.0/src/main/index.ts#L3442-L3455
- https://www.vulncheck.com/advisories/chaterm-before-0.12.1-login-csrf-via-chaterm-oauth-callback
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.