CVE-2026-110234
Description
A flaw was found in Elio. Insecure temporary file handling during preview operations allows a local attacker to overwrite arbitrary files belonging to another user. By determining the victim's process identifier (PID) and placing symbolic links at predictable file locations, an attacker can cause the application to truncate and overwrite victim-owned files when previews of media, fonts, or archives are generated.
Statement
Red Hat has evaluated this vulnerability as having a Moderate impact because exploitation requires existing local system access, predicting or obtaining the running process ID of another user, and specific user interaction to trigger an affected preview action. The attack cannot be executed remotely, nor does it permit code execution or privilege escalation beyond modifying files accessible to the victim. Furthermore, Elio is not distributed or supported within Red Hat Enterprise Linux.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Access Control
Technical Impact: Read Files or Directories; Modify Files or Directories; Bypass Protection Mechanism
An attacker may be able to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. If the files are used for a security mechanism then an attacker may be able to bypass the mechanism.
Other
Technical Impact: Execute Unauthorized Code or Commands
Windows simple shortcuts, sometimes referred to as soft links, can be exploited remotely since a ".LNK" file can be uploaded like a normal file. This can enable remote execution.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
