CVE-2026-121549

The nnn utility (versions through 5.3 ) is vulnerable to an insecure temporary file symlink overwrite in its pdfread and nuke plugins. The root cause is the use of predictable paths in the /tmp directory for temporary files. A local attacker can pre-create a symlink at a name-derived or PID-deriv...