Lucene search
+L

7 matches found

PyPA
PyPA
•added 2026/07/13 2:36 p.m.•28 views

Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite

ImpactWhat kind of vulnerability is it? Who is impacted?Receiving a file wormhole receive from a malicious party could result in overwriting critical local files, including /.ssh/authorizedkeys and .bashrc. This could be used to compromise the receiver's computer.Only the sender of the file the...

8.2CVSS5.6AI score0.00527EPSS
SaveExploits0References5Affected Software1
osv_pysec
osv_pysec
•added 2026/07/13 2:36 p.m.•29 views

PYSEC-2026-2615 Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite

Impact What kind of vulnerability is it? Who is impacted? Receiving a file wormhole receive from a malicious party could result in overwriting critical local files, including /.ssh/authorizedkeys and .bashrc. This could be used to compromise the receiver's computer. Only the sender of the file th...

8.2CVSS5.6AI score0.00527EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/03/13 3:40 p.m.•32 views

Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite

Impact What kind of vulnerability is it? Who is impacted? Receiving a file wormhole receive from a malicious party could result in overwriting critical local files, including /.ssh/authorizedkeys and .bashrc. This could be used to compromise the receiver's computer. Only the sender of the file th...

8.2CVSS5.6AI score0.00527EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2026/03/13 3:40 p.m.•27 views

GHSA-4G4C-MFQG-PJ8R Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite

Impact What kind of vulnerability is it? Who is impacted? Receiving a file wormhole receive from a malicious party could result in overwriting critical local files, including /.ssh/authorizedkeys and .bashrc. This could be used to compromise the receiver's computer. Only the sender of the file th...

8.2CVSS5.6AI score0.00527EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/03/12 5:40 p.m.•58 views

CVE-2026-32116 Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite

Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another. From 0.21.0 to before 0.23.0, receiving a file wormhole receive from a malicious party could result in overwriting critical local files, including /.ssh/authorizedkeys and .bashrc. This cou...

8.2CVSS0.00527EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/12 5:40 p.m.•16 views

CVE-2026-32116 Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite

Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another. From 0.21.0 to before 0.23.0, receiving a file wormhole receive from a malicious party could result in overwriting critical local files, including /.ssh/authorizedkeys and .bashrc. This cou...

8.2CVSS5.9AI score0.00527EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/03/12 5:40 p.m.•17 views

CVE-2026-32116 Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite

Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another. From 0.21.0 to before 0.23.0, receiving a file wormhole receive from a malicious party could result in overwriting critical local files, including /.ssh/authorizedkeys and .bashrc. This cou...

8.2CVSS5.9AI score0.00527EPSS
SaveExploits0References3
Rows per page
Query Builder