Threats Tagged 'cve-2026-86469'

A vulnerability in GLib2's g_file_replace() function occurs when used with G_FILE_CREATE_REPLACE_DESTINATION. If creating the temporary .goutputstream-XXXXXX file fails, the library unlinks the destination file and recreates it without exclusive creation or symlink protection. This allows a local attacker with write access to the destination directory to perform a race condition and redirect writes to an unintended file.

CVE-2026-86469 is a local vulnerability in GLib2 used by Red Hat Enterprise Linux 10. It occurs when g_file_replace() is called with G_FILE_CREATE_REPLACE_DESTINATION and the creation of a temporary file fails, causing the destination file to be unlinked and recreated without exclusive creation or symlink protection. This allows a local attacker with write access to the destination directory to exploit a race condition and redirect writes to an unintended file. Exploitation requires specific conditions including local access, write permission to the directory, and winning a race condition. The vulnerability has a medium severity with a CVSS score of 5.3. The vendor advises avoiding use of g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION on directories writable by less-privileged users as mitigation.