CVE-2026-41991

GNU gzip’s gzexe utility is vulnerable to insecure temporary file handling when mktemp is not in PATH. It constructs a temporary filename based only on the PID, and creates it without exclusive access or existence checks. A local attacker can pre-create that predicted path as a symlink to a writa...