CVE-2026-121549mediumCWE-377

CVE-2026-121549: medium-severity vulnerability in jarun nnn

nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins

Published

Follow this CVE+ Monitor nnn+ Monitor nnn

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.1epss 0.1%
nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by exploiting predictable paths in /tmp. Attackers can pre-create a symlink at the name-derived or PID-derived path so the victim's plugin truncates and overwrites any file the victim can write.
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
jarun · nnn
Related CVEs — jarun nnn

In the same product, most dangerous first.

CVE-2026-121548HIGHnnn through 5.3 OS Command Injection via togglex PluginEPSS 1.2%CVE-2025-13566MEDIUMjarun nnn nnn.c run_cmd_as_plugin double freeEPSS 0.1%CVE-2026-121550LOWnnn through 5.3 Symlink-Following Write via NNN_FIFO HandlingEPSS 0.1%