CVE-2026-121550 — Vulnerability intelligence
—
Published:
- CVSS
- 1
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main() accepts an existing NNN_FIFO path without verifying it is a FIFO. Attackers can pre-create the documented predictable /tmp/nnn.fifo path as a symlink or readable regular file, causing victim-writable files to be overwritten or leaking the victim's browsed paths.