CVE-2026-65062

Name of the Vulnerable Software and Affected Versions Data::SortedSet::Shared versions prior to 0.03

Description This issue occurs when creating a memory-mapped (mmap) backing file, which is created with world-readable permissions. The process uses the open() function in sortedset.h with a mode of 0666, resulting in a file mode of 0644 under a default umask of 022. Because the O NOFOLLOW and O EXCL flags are missing, the system follows symbolic links and uses pre-existing files instead of failing. Since these segments are typically stored in shared directories like /tmp or /dev/shm, a local attacker can read Inter-Process Communication (IPC) payloads or use a pre-planted file or symlink to win a pre-creation race and redirect the open operation.

Recommendations Update to version 0.03 or later.