Chaterm 0.12.5 fixes kubeconfigs written 0644 to predictable /tmp paths and an SFTP path traversal
GitHub·medium signal
The AI infrastructure terminal (3,087 stars) shipped on 2026-09-24. Before this release it wrote temporary Kubernetes kubeconfig files to guessable /tmp paths with world-readable permissions, so any local user could read cluster credentials. A malicious SFTP server could also write files outside the chosen download directory. If you point an agent terminal at production clusters, upgrade now.