The flaw is a time‐of‐check to time‐of‐use race in the linenoiseHistorySave routine, allowing a local attacker to create or replace a symlink for the history file and then overwrite the target file when the program opens the path for writing and later applies chmod on that path. The result is that any file reachable by the symlink can be replaced or have its permissions altered, potentially enabling privilege escalation or file corruption.

This vulnerability affects all versions of the linenoise library released by antirez. The issue is present in every build that uses the default history‑saving code and does not discriminate by version.

The CVSS score of 6.8 indicates moderate severity, and the EPSS score of less than 1% implies a very low probability of exploitation. The attack vector is local: it requires a user with write access to the history file and the ability to create a symlink. Because the CVE is not listed in the CISA KEV catalog, no known public exploits are reported. Nevertheless, the local nature of the race means that any privileged local user could abuse the flaw to overwrite system files or grant themselves elevated permissions.