Vifm IPC FIFO Vulnerability Affects Multiple Versions

CVE-2026-110237

What is CVE-2026-110237?

A vulnerability in Vifm versions 0.8.1-beta to 0.14.4 arises from the reuse of an existing IPC FIFO in the shared temporary directory without validating ownership. This flaw enables local users to create a world-writable vifm-ipc-vifm FIFO, which can be exploited to send IPC packets containing commands executed with the privileges of another user. Thus, an attacker can manipulate commands to gain unauthorized access to resources, compromising the security integrity of the affected system.

References