CVE-2026-121549
Medium · 4.4CVSS
4.4
EPSS
0.1%
Published
Nov 3, 2026
CISA due date
—
The record
nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by exploiting predictable paths in /tmp. Attackers can pre-create a symlink at the name-derived or PID-derived path so the victim's plugin truncates and overwrites any file the victim can write.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-64672 Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in… CWE-377
- CVE-2026-62847 Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. CWE-377
- CVE-2026-97209 Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user… CWE-377
- CVE-2026-93864 A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local… CWE-377
- CVE-2026-113713 virtualenv is a tool for creating isolated virtual python environments. CWE-377
- CVE-2026-55480 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… CWE-377
- CVE-2026-106451 yawkat LZ4 Java provides LZ4 compression for Java. CWE-377
- CVE-2026-47852 A local attacker on a multi-user host can pre-create the deterministic cache path and… CWE-377