CVE-2026-65061

Name of the Vulnerable Software and Affected Versions Data::ReqRep::Shared versions prior to 0.05

Description This issue occurs when the software creates a world-readable mmap backing file and opens it without using O EXCL or O NOFOLLOW. The segment is created in reqrep.h using the open() function with a mode of 0666, which, under a default umask of 022, results in a file mode of 0644, making it readable by any local user. Because O NOFOLLOW is absent, the system follows symlinks planted at the path, and the absence of O EXCL allows the use of a pre-planted file instead of failing. Since these shared segments are typically located in shared directories like /tmp or /dev/shm, a local attacker can read Inter-Process Communication (IPC) payloads or use a pre-creation race to redirect the open operation.

Recommendations Update to version 0.05 or later.