PT-2026-126709
CVE-2026-118131
·
Published
2026-10-27
·
Updated
2026-10-27
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:ProgramData directory allows members of the BUILTINUsers group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create the expected GnuPG configuration directory and inject malicious configuration files consumed by GnuPG components. This can result in code execution within the security context of the victim user.
Found an issue in the description? Have something to add? Feel free to write us 👾