CVE-2026-65069

CVE-2026-65069 affects Data::DisjointSet::Shared prior to 0.02 (Perl). The code creates a segment file via open(path, O_RDWR|O_CREAT, 0666) and uses mode 0666; with default umask 022 this yields world-readable 0644. Because O_NOFOLLOW is not used, a symlink at the path is followed, and with O_EXC...