Description
Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives truncates and overwrites victim-owned files.
Published: 2026-10-13
Score: 4.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Local File Overwrite
Action: Assess Impact
AI Analysis

Impact

Elio versions up to 1.13.0 contain an insecure temporary file creation flaw (CWE-377). When the application previews media, fonts or archives it creates a temporary file at a predictable path. If an attacker can pre‑create a symbolic link pointing to a victim‑owned file, the preview operation will truncate and overwrite that file, destroying its integrity and potentially exposing sensitive content.

Affected Systems

The vulnerability affects the open‑source file manager Elio from elio‑fm, specifically all releases up to and including version 1.13.0. No other vendors or product lines are listed as affected.

Risk and Exploitability

The CVSS score of 4.1 indicates a low‑to‑medium severity risk. Because the exploit requires local interaction—knowledge of the Elio process ID and the ability to create symbolic links in the temp directory—its likelihood of exploitation is moderate at best. The EPSS score is not available, and the issue is not listed in CISA’s KEV catalog, suggesting it has not been widely exploited in the wild.

Generated by OpenCVE AI on October 17, 2026 at 05:54 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest Elio release that patches the insecure temporary file handling.
  • Disable or restrict the external preview command paths that write to predictable temporary files, or replace them with safer alternatives.
  • Reconfigure the file system permissions on Elio’s temporary directory to prevent local users from creating symbolic links or overwriting victim‑owned files.

Generated by OpenCVE AI on October 17, 2026 at 05:54 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 19 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Elio-fm
Elio-fm elio
Vendors & Products Elio-fm
Elio-fm elio

Wed, 14 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 19:00:00 +0000

Type Values Removed Values Added
Description Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives truncates and overwrites victim-owned files.
Title Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture
Weaknesses CWE-377
References
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N'}

cvssV4_0

{'score': 4.1, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Elio-fm Elio
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-14T15:57:13.139Z

Reserved: 2026-10-13T18:00:06.757Z

Link: CVE-2026-110234

cve-icon Vulnrichment

Updated: 2026-10-14T14:49:28.393Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-13T19:18:48.480

Modified: 2026-10-14T16:17:40.660

Link: CVE-2026-110234

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-19T14:03:32Z

Weaknesses