CVE-2026-110234

Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture

State: Published
Severity: 4.1 Medium
Published: Oct 13, 2026
Updated: Oct 14, 2026
Reserved: Oct 13, 2026

Description

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives truncates and overwrites victim-owned files.

Scores

CVSS	Score	Vector	Source
4.0	4.1 Medium	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N	VulnCheck
3.1	4.4 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N	VulnCheck

Weaknesses

CWE-377 Insecure Temporary File

Affected Products

Product	Versions
elioelio-fm	1.13.0 and earlierAffected

References

https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/r1d_wQojfgthird-party-advisory
https://github.com/elio-fm/elio/blob/e7daae44ce748310de441499576bdc31b936d54c/src/preview/external_commands.rs#L14-L47technical-description
https://github.com/elio-fm/elio/blob/e7daae44ce748310de441499576bdc31b936d54c/src/preview/external_commands.rs#L92-L95technical-description
https://github.com/elio-fm/elio/blob/e7daae44ce748310de441499576bdc31b936d54c/src/preview/archives/external_tools.rs#L30-L45technical-description
v1.13.0 Release Notesrelease-notes
VulnCheck Advisory: Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capturethird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.