Most recent entries from all

fkie_cve-2026-40556

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

GHSA-9g7j-rcqf-cpcx

GNU nano creates the user’s ~/.local directory with overly permissive permissions when the directory does not exist yet. On first use of features requiring Cross-Desktop Group (XDG) data storage, nano explicitly requests directory mode 0777, making the directory world‑writable in environments where the process umask does not sufficiently restrict permissions. In systems with a relaxed or zero umask, such as container environments, CI/CD runners, embedded systems, or user shells configured with umask 000, this results in ~/.local being created as world‑writable. A local attacker can exploit a race window between nano’s creation of ~/.local and its subsequent creation of more restrictive subdirectories to write attacker‑controlled files into the victim’s XDG directory hierarchy.

This problem was fixed in nano version 9.0

msrc_CVE-2026-40556 — Insecure Directory Permissions in GNU nano Leading to Privilege Abuse

msrc_CVE-2026-40556

openSUSE-SU-2026:11120-1 — nano-9.1-1.1 on GA media

nano-9.1-1.1 on GA media

Withdrawn: UBUNTU-CVE-2026-40556

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: nano, Ubuntu:Pro:16.04:LTS: nano, Ubuntu:Pro:18.04:LTS: nano, Ubuntu:20.04:LTS: nano, Ubuntu:22.04:LTS: nano, Ubuntu:24.04:LTS: nano, Ubuntu:25.10: nano, Ubuntu:26.04: nano

(GNU nano creates the user\u2019s ~/.local directory with overly permis ...)