Local File Exposure Vulnerability in Data::ReqRep::Shared for Perl

CVE-2026-65061

What is CVE-2026-65061?

The Data::ReqRep::Shared library for Perl prior to version 0.05 has a vulnerability that allows local users to access sensitive information. The library creates a shared backing file that is world-readable, thereby exposing IPC payloads. Additionally, the absence of O_EXCL allows a local attacker to replace the intended file with a pre-planted one, leading to potential data leakage. The vulnerability arises from the inappropriate file creation modes and lack of protections against symlinks. Proper remediation is essential to safeguard against unauthorized data access.

References