World-Readable Files in Data::Deque::Shared for Perl by EGOR
CVE-2026-64614
Currently unrated
What is CVE-2026-64614?
The Data::Deque::Shared module in Perl prior to version 0.06 has a vulnerability that allows local users to access sensitive data due to improper file permissions. Files created in shared memory (like /tmp or /dev/shm) are set to be world-readable, exposing IPC payloads to any local user. Furthermore, the lack of the O_EXCL flag permits pre-planted files or symlinks to be used, thus heightening the risk of local attacks. This flaw can lead to unauthorized data exposure, compromising the integrity and confidentiality of the information stored.
Affected Version(s)
Data::Deque::Shared 0 < 0.06