141
terminal2Shell is a critical flaw present in every operating system since 1971 allows anyone who opens a terminal to obtain a fully interactive shell. Instantly. With no authentication beyond the one they already did. (terminal2shell.com)
submitted 1 day ago by to c/programmerhumor@lemmy.ml
15 comments fedilink hide all child comments
 

Terminal2Shell is a design-level vulnerability in terminal emulators. When a terminal is launched, it immediately spawns a shell process and connects it directly to the user's keyboard. From there, the attacker can issue arbitrary commands with the full privileges of the logged-in user. Researchers have confirmed that the shell will execute any command typed into it, including commands that delete files, install software, and modify system configuration. In some cases, the shell has been observed executing commands the user typed themselves.

Product Vector Status

macOS Terminal.app, iTerm2, Ghostty, Warp VULNERABLE

Linux gnome-terminal, Konsole, xterm, Ctrl+Alt+F2 VULNERABLE

Windows cmd.exe, PowerShell, Windows Terminal, WSL VULNERABLE

FreeBSD / OpenBSD Literally the default experience VULNERABLE

DEC VT100 (1978) Physical serial cable VULNERABLE

Your router SSH, telnet, the little console port on the back VULNERABLE

VS Code Ctrl+` (one keystroke!) VULNERABLE

Microsoft Paint None known Not affected

all 15 comments

sorted by: hot top controversial new old
[–] 23 points 23 hours ago (4 children)

Ha, my stack of punched cards are immune! Now I just need something to read them...

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 17 points 23 hours ago (3 children)

    My mum's old knitting machine takes those!

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
    • [–] 22 points 20 hours ago (1 child)

    Oh. This is a joke.

    I’m too tired anymore to know what is real apparently.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 4 points 10 hours ago

    Lol yeah. It should have been obvious sooner given how thick it lays the joke on - but I had already entered the "groaning and preparing to power everything down" phase before reading the website.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 22 points 11 hours ago (1 child)

    Just tested my system, and it looks like I'm vulnerable. I'm uninstalling bash to see if th

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    • [–] 8 points 12 hours ago

    A # prompt indicates the attacker has obtained root. Disconnect from the network, then from society.

    😁

  • permalink
  • fedilink
  • source
    •
    [–] 7 points 23 hours ago

    Mac OS 9 and earlier are not effected. Clear the the be… bes… (cringe) best OS ever.

  • permalink
  • fedilink
  • source
    •
    [–] 7 points 14 hours ago*

    And it was discovered with an LLM by some "vibe coder" (please hold your nose while pronouncing) with curly blonde hair, empty blue eyes, a business degree, and horrible political opinions. In addition, he talks your ear off about the inevitable glorious agentic AI future and how nobody needs RAM and that all resources in the world should be used towards bringing this future to past, with his response to most arguments against him being something along the lines of "resistance is futile".

  • permalink
  • fedilink
  • source
    •
    [–] 4 points 18 hours ago

    No privilege elevation? CVE 0

  • permalink
  • fedilink
  • source
    •
    [–] 3 points 19 hours ago

    I'm ashamed it took me THAT long. Only upon opening my yakuake it slowly dawned on me. I really feel dumb now....

  • permalink
  • fedilink
  • source
    •
    [–] 1 point 19 hours ago

    This is what I'm here for

  • permalink
  • fedilink
  • source
    •