CVE-2026-6842

Summary

A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the ~/.local directory. This allows the attacker to inject a malicious .desktop launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.

Affected Software

VendorProductVersion RangeStatus

Weaknesses

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Workarounds

Ensure that the system's umask is configured to a secure value, such as 0022 or 0077, to prevent the creation of world-writable directories. This can be set system-wide in /etc/profile or /etc/bashrc, or for individual users in their ~/.bashrc or ~/.profile. A secure umask will ensure that newly created directories, including ~/.local by nano, have appropriate permissions.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References