CVE-2016-1202: Atom Electron

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory of a directory named on a require line.

Affected products

• Atom Electron: up to and including 0.33.4

Published 2016-04-25. Last modified 2026-06-17.