CVE-2025-22136 | Eugeny tabby up to 1.0.216 Electron Fuse code injection (GHSA-prcj-7rvc-26h4)

A vulnerability, which was classified as critical, has been found in Eugeny tabby up to 1.0.216. Affected by this issue is the function RunAsNode/EnableNodeCliInspectArguments/EnableNodeOptionsEnvironmentVariable of the component Electron Fuse Handler. The manipulation leads to code injection.

This vulnerability is handled as CVE-2025-22136. The attack needs to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.