VulnSocial

CVE-2025-12843Disclosure(apple / macos)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Code Injection using Electron Fuses in waveterm on MacOS allows TCC Bypass. This issue affects waveterm: 0.12.2.

apple CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Other references
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • macos
  • wave_terminal

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
applewaveterm
Products
macoswave_terminal

2 versions affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-17: 102-17
Signal classification1 categories
Disclosure
1100.0%
Referenced assets2 URLs
Full discourse1 post
  • Fluid Attacks@fluidattacks
    Disclosure

    Fluid Attacks' research team found a zero-day vulnerability in Wave Term. As a #CNA, we assigned the ID CVE-2025-12843. Details here: 🔗 https://fluidattacks.com/es/advisories/minutos. We have disclosed 220 #CVE to this date: 🔗https://fluidattacks.com/advisories/. https://t.co/7kAzHK2mc6

    Post summary

    Fluid Attacks announced a zero‑day vulnerability in Wave Term, assigned CVE-2025-12843, and shared advisory details via a link.

    0000071
    871 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSapplemacos---
Appwavetermwave_terminal0.12.2--

Explore more

Back to dashboardapple CVEswaveterm CVEsmacos vulnerabilities