CVE-2026-121549

nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by exploiting predictable paths in /tmp. Attackers can pre-create a symlink at the name-derived or PID-derived path so the victim's plugin truncates and...

EUVD-2026-115894

nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by exploiting predictable paths in /tmp. Attackers can pre-create a symlink at the name-derived or PID-derived path so the victim's plugin truncates and...

CVE-2026-121549

The nnn utility (versions through 5.3 ) is vulnerable to an insecure temporary file symlink overwrite in its pdfread and nuke plugins. The root cause is the use of predictable paths in the /tmp directory for temporary files. A local attacker can pre-create a symlink at a name-derived or PID-deriv...

CVE-2026-121549: jarun nnn: nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local…

nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by exploiting predictable paths in /tmp. Attackers can pre-create a symlink at the name-derived or PID-derived path so the victim's plugin truncates and...