.. / chrome

• Command

This vector is particularly interesting for Electron applications and features relying on headless browsers.

Command

It can be used to break out from restricted environments by running non-interactive system commands.

• chrome '--gpu-launcher="id>/tmp/foo"'

References

• Exploiting Electron RCE in Exodus wallet

• CVE-2021-38112: AWS WorkSpaces Remote Code Execution