CVE-2026-122136 · Package
NO FIX YET · SEE WHAT TO DO
Powerlevel10k, a Zsh prompt theme, writes its instant-prompt cache to a predictable path in TMPDIR and follows symlinks there. A local attacker who pre-plants a symlink can make shell startup truncate and overwrite files the victim can write.
first public Nov 4, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Affects people who run Powerlevel10k as their Zsh prompt on a shared or multi-user machine where another local user could write to TMPDIR. Single-user machines with a private TMPDIR carry much lower risk. unknown on whether managed systems or containers are affected.
Not affected if private-tmpdir, single-user-machine, version-1.20.19-or-later
Who cares multi-user, powerlevel10k, shell, zsh
p10k version or the theme's git tag where it was cloned.p10k-instant-prompt- files in TMPDIR that are symlinks, using ls -l $TMPDIR.1.20.19 (fixed version per the advisory; affected: before 1.20.19).Powerlevel10k before 1.20.19 contains a symlink following vulnerability in _p9k_dump_instant_prompt that allows local attackers to overwrite victim-writable files via a predictable temporary path. Attackers can pre-plant symlinks at p10k-instant-prompt-output-<user>-<pid> in TMPDIR, guessing the victim's shell PID, so shell startup truncates and overwrites targeted files.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.