CVE-2025-12843: Waveterm Wave Terminal

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Code Injection using Electron Fuses in waveterm on MacOS allows TCC Bypass. This issue affects waveterm: 0.12.2.

Affected products

• Waveterm Wave Terminal: version 0.12.2 only

Published 2025-12-12. Last modified 2026-06-17.