An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/88xxx/CVE-2026-88514.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"fixed": "3.6.12"
}
],
"source": "DESCRIPTION"
}
]
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-88514.json"
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"114015288559718572992389235579109946595",
"143591839082428750666279598447014242946",
"169293036217090752055724810110683899976",
"176543128955302349386300557407679832622",
"220736525038090707934252951465836079770",
"290154951115990719240641615099352840725",
"224185824096725505385752300666201741235",
"49847907251769460330495378008040620337",
"319054192517966049879375206347412233378",
"300605304545979171258950054470464400745",
"291173753922935861876387311349050272221",
"254318710607328843261362571228357273256"
],
"threshold": 0.9
},
"id": "CVE-2026-88514-c9a7eeac",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/gnachman/iterm2/commit/1260814ac9c12aeb3a5cbfb26d00c72ff9e79327",
"target": {
"file": "sources/Tasks/iTermFileDescriptorClient.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "260872250514203499361988977534453085104",
"length": 1322
},
"id": "CVE-2026-88514-dcd91e17",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gnachman/iterm2/commit/1260814ac9c12aeb3a5cbfb26d00c72ff9e79327",
"target": {
"file": "sources/Tasks/iTermFileDescriptorClient.c",
"function": "iTermFileDescriptorClientConnect"
}
}
]
"2026-10-09T07:06:07Z"