CVE-2025-22275

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-22275
iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from terminal commands by reading the /tmp/framer.txt file. This can occur for certain it2ssh and SSH Integration configurations, during remote logins to hosts that have a common Python installation.

9.3 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://gitlab.com/gnachman/iterm2/-/wikis/SSH-Integration-Information-Leak Third Party Advisory
https://iterm2.com/downloads/stable/iTerm2-3_5_11.changelog Release Notes
https://news.ycombinator.com/item?id=42579472 Issue Tracking
Configurations

Configuration 1 (hide)

cpe:2.3:a:iterm2:iterm2:*:*:*:*:*:*:*:*
History

20 Jun 2025, 18:10

Type Values Removed Values Added
References () https://gitlab.com/gnachman/iterm2/-/wikis/SSH-Integration-Information-Leak - () https://gitlab.com/gnachman/iterm2/-/wikis/SSH-Integration-Information-Leak - Third Party Advisory
References () https://iterm2.com/downloads/stable/iTerm2-3_5_11.changelog - () https://iterm2.com/downloads/stable/iTerm2-3_5_11.changelog - Release Notes
References () https://news.ycombinator.com/item?id=42579472 - () https://news.ycombinator.com/item?id=42579472 - Issue Tracking
Summary
  • (es) iTerm2 3.5.6 a 3.5.10 antes de 3.5.11 a veces permite a atacantes remotos obtener información confidencial de comandos de terminal mediante la lectura del archivo /tmp/framer.txt. Esto puede ocurrir en ciertas configuraciones de it2ssh y de integración SSH, durante inicios de sesión remotos en hosts que tienen una instalación de Python común.
First Time Iterm2
Iterm2 iterm2
CPE cpe:2.3:a:iterm2:iterm2:*:*:*:*:*:*:*:*

03 Jan 2025, 07:15

Type Values Removed Values Added
References
  • () https://gitlab.com/gnachman/iterm2/-/wikis/SSH-Integration-Information-Leak -

03 Jan 2025, 06:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.3
CWE CWE-532

03 Jan 2025, 05:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-03 05:15

Updated : 2025-06-20 18:10

NVD link : CVE-2025-22275

Mitre link : CVE-2025-22275

CVE.ORG link : CVE-2025-22275

JSON object : View

Products Affected

iterm2

  • iterm2
CWE
CWE-532

Insertion of Sensitive Information into Log File