CVE-2026-111802

Nautilus: nautilus: arbitrary file deletion via trash symlink

State: Published
Severity: 6.6 Medium
Published: Oct 16, 2026
Updated: Nov 1, 2026
Reserved: Oct 16, 2026

Description

A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume and confirming the prompt to empty the trash, leading to the arbitrary deletion of files accessible to that user.

Scores

CVSS	Score	Vector	Source
3.1	6.6 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H	redhat

Weaknesses

CWE-59 Improper Link Resolution Before File Access

Affected Products

Product	Versions
Red Hat Enterprise Linux 10Red Hat
Red Hat Enterprise Linux 6Red Hat
Red Hat Enterprise Linux 7Red Hat
Red Hat Enterprise Linux 8Red Hat
Red Hat Enterprise Linux 9Red Hat

References

https://access.redhat.com/security/cve/CVE-2026-111802vdb-entry
RHBZ#2554410issue-tracking
https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/2179

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.