Product by Eugeny
Tabby
8 known vulnerabilities in Tabby (Eugeny), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-72903 | Eugeny Tabby: Path Traversal | 8.1 | |
| Critical | CVE-2026-45035 | Tabby: RCE via `tabby://run` URL Scheme | 8.8 | |
| High | CVE-2026-46709 | Eugeny Tabby: OS Command Injection | 7.8 | |
| High | CVE-2026-45038 | Tabby: Dragging and Dropping a File into Tabby Can Lead to Code Execution | 7.8 | |
| High | CVE-2025-22136 | Tabby has a TCC Bypass via Misconfigured Node Fuses | — | |
| High | CVE-2024-55950 | Tabby has a TCC Bypass via Unnecessary Permissive Entitlements in Tabby | — | |
| High | CVE-2026-45037 | Eugeny Tabby: Incomplete List of Disallowed Inputs | 7.1 | |
| High | CVE-2026-45036 | Eugeny Tabby: OS Command Injection | 7.0 |