tmux vulnerabilities

Products

• tmux 2

Latest tmux CVEs

Newest publication first

1. CVE-2026-11623 tmux image.c image_free use after free

   Published 2026-06-09

   Low·CVSS 2.0 EPSS 0.12%

   A security vulnerability has been detected in tmux up to 3.6a. Affected is the function image_free of the file image.c. Such manipulation leads to use after free. Local access is required to approach this attack. This attack is characterized by high complexity. The exploitability...

2. CVE-2020-27347 tmux stack buffer overflow in function input_csi_dispatch_sgr_colon

   Published 2020-11-06

   High·CVSS 7.8 EPSS 0.69%

   In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.