TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path and subsequent chmod() on the same path.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade redis-develUpgrade redis-debuginfoUpgrade redis-docUpgrade redis | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade redis6-docUpgrade redis6Upgrade redis6-develUpgrade redis6-debugsourceUpgrade redis6-debuginfo | Sep 30, 2025 | Sep 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub