Threats tagged 'ghsa-v68w-4wfv-crrh'

Powerlevel10k versions prior to 1.20.19 have a symlink following vulnerability in the _p9k_dump_instant_prompt function. This flaw allows local attackers to overwrite files writable by the victim by creating symlinks in a predictable temporary file path. The attack requires guessing the victim's shell process ID to pre-plant symlinks named p10k-instant-prompt-output-<user>-<pid> in the TMPDIR directory, causing the shell startup to truncate and overwrite the targeted files.