Live › vulnerability › CVE-2026-121549
The pdfread and nuke plugins for the nnn terminal file manager create temporary files at predictable paths in /tmp. A local attacker can pre-create a symlink at that path so the plugin truncates and overwrites any file the victim can write.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 16:21 UTC. All times on this page are UTC.
Only machines where nnn 5.3 or earlier is installed with the pdfread or nuke plugin enabled are exposed. The attacker needs a local account on the same machine and must race the predictable /tmp path. Systems without these plugins, or where nnn is not installed, can skip it.
No product ranges from the sources yet.
nnn -V and compare it against the range in the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by exploiting predictable paths in /tmp. Attackers can pre-create a symlink at the name-derived or PID-derived path so the victim's plugin truncates and overwrites any file the victim can write.
This page as .md · .json · in your agent: get_signal("CVE-2026-121549")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.