shouldiuse.io

Categories

VERDICT

Should I use Ghostty?

Fast, feature-rich, cross-platform terminal emulator - ghostty.org

Worth it. Ghostty is a free, fast terminal emulator that developers genuinely enjoy — a no-risk try if you live in the shell. Skip it if you're not technical or your security team can't stomach its CVE history.

Confidence

Medium. Based on 20+ public sources: independent reviews, Reddit threads, CVE databases, and official docs.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Free

Ghostty

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes

Best for

  • Developers wanting a fast native terminal
  • macOS and Linux power users
  • Neovim and CLI-heavy workflows
  • iTerm2 defectors seeking speed

Not for

  • Non-developers who rarely open a terminal
  • Security-strict enterprises — some companies banned it
  • Teams needing vendor support or SLAs
  • Feature maximalists — WezTerm does more

Gotchas - check before you buy

high

Must run v1.3.0+; some Linux distros left CVE-2026-26982 unpatched

medium

No vendor support or SLA — community-only help; one user's company forced a switch away

medium

Project left GitHub in 2026; issue reporting and hosting channels are in flux

low

A memory leak postmortem circulated post-launch; performance bugs have surfaced

Pros and cons

Pros

  • Free and open source with no paid tiers
  • GPU-accelerated; users say it feels smoother than WezTerm
  • Very feature-rich with hundreds of config options
  • Drop-in SSH wrapper included
  • Reviewers report pleasant daily use and solid performance

Cons

  • 2026 command-execution CVE pushed some companies to ban it
  • No security policy published on GitHub
  • New-user onboarding criticized as rough
  • Critics call it overhyped; WezTerm offers more
  • Left GitHub citing chronic platform reliability failures

Sources & method

Analyzed 10/02/2026 - 10 sources - Two command-execution CVEs on record; fixed in v1.3.0, but no formal security policy is published.

official x2review x4security x2news x2
  • CVE-2026-26982 — arbitrary command execution via control characters, Improper neutralization allowed command execution; fixed in Ghostty v1.3.0, though some Linux distros lagged on patching.
  • CVE-2024-56803 — command execution around launch era, Critical command-execution vulnerability reported shortly after release; related terminal-title injection also explored publicly.

Key stats

  • Value for money: 5/5

    Rating

  • Free

    Starting price

  • 10

    Sources

  • Analyzed

  • Value for money: 5/5. Free, open source, no paid tiers.
  • Ease of use: 3/5. Called user-friendly, but onboarding criticized.
  • Feature depth: 4/5. Very feature-rich; WezTerm still does more.
  • Support quality: 2/5. Community-only, no SLAs, no security policy.
  • Security posture: 2/5. Two command-execution CVEs on record.
  • Free Price Open source, donation-funded
  • 2 Known CVEs 2024 and 2026 command-execution flaws
  • v1.3.0 Patched in Fixes CVE-2026-26982
  • Dec 2024 1.0 launch Became a non-profit Dec 2025

Pricing

Ghostty

Free

  • Full emulator, all features
  • No accounts or upsells
  • Donation-funded non-profit

Security

Two command-execution CVEs on record; fixed in v1.3.0, but no formal security policy is published.

  • CVE-2026-26982 — arbitrary command execution via control charactersImproper neutralization allowed command execution; fixed in Ghostty v1.3.0, though some Linux distros lagged on patching.⁷
  • CVE-2024-56803 — command execution around launch eraCritical command-execution vulnerability reported shortly after release; related terminal-title injection also explored publicly.

What users say

Developers broadly praise Ghostty's speed and smoothness, though some call the hype overblown and onboarding rough.

“Ghostty feels smoother than WezTerm”
Medium — Pthapa
“I'm happy with Ghostty.”
Jonas Hietala blog
“It's ok. Saw the performance benchmarks”
Reddit, r/programming

Alternatives

Compare Ghostty with each alternative.

  • WezTerm

    More configurable and feature-heavy; critics say it does more.

  • Kitty

    Mature GPU terminal; the most frequent Ghostty comparison.

  • iTerm2

    Long-standing macOS favorite many Ghostty switchers left.

    Ghostty vs iTerm2
Full analysis

Based on 20+ public sources: independent reviews, Reddit threads, CVE databases, and official docs.

Free, fast terminal devs love — patch to v1.3.0+ for the 2026 RCE, skip if you never touch a shell.

Methodology

Based on 20+ public sources: independent reviews, Reddit threads, CVE databases, and official docs.

Sources

  1. Ghostty official siteghostty.org
    official
  2. Ghostty configuration docsghostty.org
    official
  3. Ghostty Terminal: Never Understood the Hype Until I tried it — It's FOSSitsfoss.com
    review
  4. First impressions of Ghostty — Jonas Hietalajonashietala.se
    review
  5. Ghostty Is a Great but Overhyped Terminal Emulator — Mediummedium.com
    review
  6. First impressions of Ghostty — Reddit r/programmingreddit.com
    review
  7. CVE-2026-26982 — NVDnvd.nist.gov
    security
  8. GHSA-4jxv-xgrp-5m3r — GitHub advisorygithub.com
    security
  9. Ghostty Is Leaving GitHub — Mitchell Hashimotomitchellh.com
    news
  10. Ghostty is now non-profitnews.ycombinator.com
    news

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.