CVE-2026-121550
LOW
NVD
CVSS Score
3.3
Severity
LOW
Published
Nov 03, 2026
Vendor
unknown
Description
nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main() accepts an existing NNN_FIFO path without verifying it is a FIFO. Attackers can pre-create the documented predictable /tmp/nnn.fifo path as a symlink or readable regular file, causing victim-writable files to be overwritten or leaking the victim's browsed paths.