Threats Tagged 'cve-2026-86469'

A vulnerability in GLib2's g_file_replace() function occurs when used with G_FILE_CREATE_REPLACE_DESTINATION and the creation of a temporary file fails. In this fallback scenario, the destination file is unlinked and recreated without exclusive creation or symlink protection, allowing a local attacker with write access to the destination directory to exploit a race condition and redirect writes to arbitrary files. Exploitation requires local access, write permissions on the directory, and winning a race condition. The vulnerability has a medium severity rating and a CVSS score of 5.3.

CVE-2026-86469 is a local vulnerability in GLib2 used by Red Hat Enterprise Linux 10. It occurs when g_file_replace() is called with G_FILE_CREATE_REPLACE_DESTINATION and the creation of a temporary file fails, causing the library to unlink and recreate the destination file without exclusive creation or symlink protection. This allows a local attacker with write access to the destination directory to win a race condition and redirect writes to an unintended file. Exploitation requires specific conditions including local access, directory write permissions, and winning a race. The vulnerability has a medium severity with a CVSS score of 5.3. Red Hat advises not to use g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION on paths in directories writable by less-privileged users. No official patch or fix status is confirmed yet.