CVE-2026-121550
LOW
INFO
Priority: 0.00
BB Relevance:
17/100
Published: 2026-11-03
Modified: 2026-11-09
First seen: 2026-11-03
Status: active
Attack Surface
Low Complexity
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
Active
AT:
Present
VC:
Low
VI:
Low
VA:
None
Description
nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main() accepts an existing NNN_FIFO path without verifying it is a FIFO. Attackers can pre-create the documented predictable /tmp/nnn.fifo path as a symlink or readable regular file, causing victim-writable files to be overwritten or leaking the victim's browsed paths.
Weakness Classification (1)
References & Advisories (6)
third-party-advisory
technical-description
technical-description
product
patch
issue-tracking