TLDR InfoSec · ATTACKS & VULNERABILITIES
CRITICAL VULNERABILITY IN ITERM2
Summary from the TLDR InfoSec newsletter
The popular macOS terminal emulator iTerm2 released a critical security fix for versions 3.5.6-3.5.10. The vulnerability arises from a bug in the SSH integration feature which causes input and output to be logged to a file /tmp/framer.txt on the remote host. Users are advised to upgrade and remove any /tmp/framer.txt files that may have been created.