CVE-2026-6842

Name of the Vulnerable Software and Affected Versions nano (affected versions not specified)

Description A flaw exists where incorrect directory permissions are applied to the ~/.local directory, setting them to 0777 instead of 0700 in environments with permissive umask settings. A local attacker can exploit this to inject a malicious .desktop launcher, potentially leading to unintended actions or information disclosure when the launcher is processed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.