CVE-2026-118131

GnuPG version 2.5.21 for Windows is vulnerable to a security flaw caused by default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory. This allows members of the BUILTIN\Users group to create arbitrary subdirectories within that path. A low-privilege attacker ca...