CVE-2026-64617

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in pubsub.h with open(path, O_RDWR|O_CREAT, 0666). The mode is 0666, so under the default umask 022 the file is created mode 0644 (world-readable). O_NOFOLLOW is absent, so a symlink planted at the path is followed, and O_EXCL is absent, so the open silently uses a pre-planted file instead of failing. A "Shared" segment naturally lives in a shared directory such as /tmp or /dev/shm, where any local user can read the IPC payloads stored in the world-readable segment, and a pre-planted file or symlink at the path lets a local attacker win a pre-creation race or redirect the open.

• CWE-59
• CWE-732

• https://metacpan.org/release/EGOR/Data-PubSub-Shared-0.07/changes
• https://metacpan.org/release/EGOR/Data-PubSub-Shared-0.07/diff/EGOR/Data-PubSub-Shared-0.06#pubsub.h

Published

Jul 21, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-64611A flaw was found in libcupsfilters. The cfIEEE1284NormalizeM…7.5
• CVE-2026-64612A flaw was found in libcupsfilters and cups-filters. The PNG…7.5
• CVE-2026-64613Data::Buffer::Shared versions before 0.05 for Perl create a …6.2
• CVE-2026-64614Data::Deque::Shared versions before 0.06 for Perl create a w…3.8
• CVE-2026-64615Data::Graph::Shared versions before 0.04 for Perl create a w…3.3
• CVE-2026-64616Data::NDArray::Shared versions before 0.02 for Perl create a…3.3
• CVE-2026-64619FileCodeBox before 2.4 contains a rate-limit bypass vulnerab…8.7
• CVE-2026-64620FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-ba…9.1
• CVE-2026-64621FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains…9.3
• CVE-2026-64622Network-AI (npm: network-ai) versions 5.12.2 through 5.13.3 …9.3
• CVE-2026-64623Network-AI before 5.13.4 contains an improper cryptographic …8.8
• CVE-2026-64624FreeRDP before 3.28.0 treats lines beginning with forward sl…8.5