Nixpkgs security tracker

Login with GitHub

Suggestions search

Untriaged

Filter by:

With package: tabby-agent

Found 1 matching suggestions

View:

Compact

Detailed

Permalink CVE-2026-46709

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 week, 1 day ago Activity log

Created suggestion 1 week, 1 day ago

Tabby: Drag-and-drop path injection still allows RCE via shell command substitution (incomplete fix for CVE-2026-45038)

Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.234, Tabby inserts dropped file paths from tabby-electron/src/pathDrop.ts into the active shell without neutralizing command substitution metacharacters such as $(…) and `…`, so the incomplete CVE-2026-45038 fix for control characters still allows code execution when the victim presses Enter. This issue is fixed in version 1.0.234.

References

https://github.com/Eugeny/tabby/security/advisories/GHSA-mq9v-2pgm-fxgh exploitx_refsource_CONFIRM
https://github.com/Eugeny/tabby/commit/e151472b951bbd472ddc0545ec8656e4c0f352da x_refsource_MISC
https://github.com/Eugeny/tabby/releases/tag/v1.0.234 x_refsource_MISC

Affected products

tabby

==< 1.0.234

Matching in nixpkgs

pkgs.tabby

Self-hosted AI coding assistant

nixos-unstable 0.28.0
- nixpkgs-unstable 0.28.0
- nixos-unstable-small 0.28.0
nixos-26.05 0.28.0
- nixos-26.05-small 0.28.0
- nixpkgs-26.05-darwin 0.28.0

pkgs.tabby-agent

Language server used to communicate with Tabby server

nixos-unstable 0.32.0
- nixpkgs-unstable 0.32.0
- nixos-unstable-small 0.32.0
nixos-26.05 0.31.2
- nixos-26.05-small 0.32.0
- nixpkgs-26.05-darwin 0.31.2

pkgs.pkgsRocm.tabby

Self-hosted AI coding assistant

nixos-unstable 0.28.0
- nixpkgs-unstable 0.28.0
- nixos-unstable-small 0.28.0
nixos-26.05 0.28.0
- nixos-26.05-small 0.28.0
- nixpkgs-26.05-darwin 0.28.0

pkgs.typstPackages.tabbyterms

Layout the term list as a table, even with multiple columns

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0
nixos-26.05 0.1.0
- nixpkgs-26.05-darwin 0.1.0

pkgs.typstPackages.tabbyterms_0_1_0

Layout the term list as a table, even with multiple columns

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0
nixos-26.05 0.1.0
- nixpkgs-26.05-darwin 0.1.0

Package maintainers

@ghthor Will Owens <ghthor@gmail.com>
@skohtv Skoh <contact@skoh.dev>
@RossSmyth Ross Smyth
@cherrypiejam Gongqi Huang

1