GHSA-96gh-683j-p43hLowCVSS 3.3

nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to...

Published
November 3, 2026
Last Modified
November 3, 2026

🔗 CVE IDs covered (1)

📋 Description

nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main() accepts an existing NNN_FIFO path without verifying it is a FIFO. Attackers can pre-create the documented predictable /tmp/nnn.fifo path as a symlink or readable regular file, causing victim-writable files to be overwritten or leaking the victim's browsed paths.

🔗 References (8)