Terax v0.6.4

What's Changed

• fix(settings): make model dropdowns scrollable by @Kushal2205a in #226
• fix :split divider bleed from inactive terminal tabs by @shiva-manu in #222
• feat(workspace): add suport WSL (Windows) workspace environment by @viniraioli in #202
• fix(explorer): clip overflow so tree names and inline inputs fit the sidebar by @amaralkaff in #215

New Contributors

• @Kushal2205a made their first contribution in #226
• @shiva-manu made their first contribution in #222
• @viniraioli made their first contribution in #202

Security

Fixed a critical vulnerability where a remote SSH server (or any process writing to the PTY) could
cause Terax to open arbitrary local files in the editor with no user interaction or warning,
exposing SSH keys, cloud credentials, files, and other secrets readable by the OS user.

The OSC 8888 escape sequence handler has been removed entirely. A GitHub Security Advisory and CVE
will follow.

• CWE-22 (Path Traversal), CWE-269 (Improper Privilege Management)
• Affected: >= 0.6.0, < 0.6.4
• Reported by @eulex on 2026-05-12 via responsible disclosure.

Thanks to eulex for the high-quality report and PoC.

Full Changelog: v0.6.3...v0.6.4