TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path and subsequent chmod() on the same path.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade redis-develUpgrade redis-debuginfoUpgrade redisUpgrade redis-doc | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade redis6-debuginfoUpgrade redis6Upgrade redis6-docUpgrade redis6-develUpgrade redis6-debugsource | Sep 30, 2025 | Sep 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub