Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Ghostty is a cross-platform terminal emulator. Ghostty allows control characters such as 0x03 (Ctrl+C) in pasted and dropped text. These can be used to execute arbitrary commands in some shell environments. This attack requires an attacker to convince the user to copy and paste or drag and drop malicious text. The attack requires user interaction to be triggered, but the dangerous characters are invisible in most GUI environments so it isn't trivially detected, especially if the string contents are complex. Fixed in Ghostty v1.3.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-26982 Ghostty Terminal Emulator Arbitrary Command Execution via Pasted Control Characters https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26982
Post summary
The text announces CVE-2026-26982, describing it as an arbitrary command execution flaw in the Ghostly Terminal Emulator triggered by pasted control characters, but provides no proof of exploit, patch, or active exploitation data.
CVE-2026-26982 Ghostty is a cross-platform terminal emulator. Ghostty allows control characters such as 0x03 (Ctrl+C) in pasted and dropped text. These can be used to execute arbitr… https://www.cve.org/CVERecord?id=CVE-2026-26982
Post summary
A new CVE (CVE-2026-26982) affecting Ghostty terminal emulator is disclosed, noting that control characters (e.g., Ctrl+C) can be injected via pasted or dropped text, potentially enabling arbitrary code execution. No PoC, exploit, patch, or active exploitation information is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ghostty | ghostty | - | - | - |