CVE-2025-12843

MEDIUM 5.5CVE-2025-12843 · Published 12/12/2025 · updated 14/10/2026

In short

CVE-2025-12843 is a MEDIUM (CVSS 5.5) vulnerability affecting wave terminal (waveterm).
Chance of exploitation in the next 30 days (EPSS): 0.21%, higher than 11.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wave terminal waveterm	`= 0.12.2`	No fix yet

Code Injection using Electron Fuses in waveterm on MacOS allows TCC Bypass. This issue affects waveterm: 0.12.2.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.