{"id":"CVE-2026-118990","aliases":[],"cve":{"records":[{"id":"CVE-2026-118990","source":"CPANSec","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-29T10:58:47.285Z","published":"2026-10-30T13:12:29.396Z","modified":"2026-10-30T13:12:29.396Z"}],"publishers":[{"name":"CPANSec","role":"CNA","organizationId":"9b29abf9-4ab0-4765-b253-1875cd9b441e","modified":"2026-10-30T13:12:29.396Z"}],"references":[{"url":"https://metacpan.org/release/OETIKER/CallBackery-0.62.0/changes","tags":["release-notes"],"source":"CPANSec"}],"weaknesses":[{"id":"CWE-379","description":"CWE-379 Creation of Temporary File in Directory with Insecure Permissions","source":"CPANSec"},{"id":"CWE-59","description":"CWE-59 Improper Link Resolution Before File Access","source":"CPANSec"}],"applicability":[],"prioritization":[]},"title":"CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup","titleSource":"CPANSec","descriptionSource":"CPANSec","description":"CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup.\n\ngetConfigBlob() has the sqlite3 shell write the dump to /tmp/cbdump<pid> and never removes it. The file takes the process umask, and a symlink planted at that predictable name is followed.\n\nThe dump holds every user's password hash and every value saved by the application's forms. A local user can read these after any backup, and may redirect the dump to a file of their choosing.","score":null,"severity":"unknown","published":"2026-10-30T13:12:29.396Z","modified":"2026-10-30T13:12:29.396Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"","name":"CallBackery","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"0.62.0","versionType":"custom"}],"defaultStatus":"unaffected","packageURL":"pkg:cpan/CallBackery","cpes":[],"source":"CPANSec","url":"https://www.cve.org/CVERecord?id=CVE-2026-118990"}],"remediation":[{"text":"Upgrade to CallBackery 0.62.0 or later, and delete any leftover /tmp/cbdump* files.","source":"CPANSec","url":"https://www.cve.org/CVERecord?id=CVE-2026-118990"}],"references":["https://metacpan.org/release/OETIKER/CallBackery-0.62.0/changes"],"sources":[{"name":"CVE","id":"CVE-2026-118990","modified":"2026-10-30T13:12:29.396Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-118990"}],"assessments":[],"sourceAffected":[],"observedAt":"2026-10-30T14:53:45.993Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T09:15:31.262Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T15:55:33.423Z","attemptedAt":"2026-10-30T15:55:33.423Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-30T15:55:33.762Z","attemptedAt":"2026-10-30T15:55:33.762Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T15:55:34.054Z","attemptedAt":"2026-10-30T15:55:34.054Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T15:55:33.618Z","attemptedAt":"2026-10-30T15:55:33.618Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-118990","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118990","modified":"2026-10-30T13:18:31.763","checkedAt":"2026-10-30T15:55:33.423Z"},{"source":"GitHub Advisory Database","id":"GHSA-xc26-6hhc-42vj","url":"https://github.com/advisories/GHSA-xc26-6hhc-42vj","modified":"2026-10-30T15:34:37Z","checkedAt":"2026-10-30T15:55:33.762Z"},{"source":"ENISA EUVD","id":"EUVD-2026-113920","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113920","modified":"Oct 30, 2026, 1:12:29 PM","checkedAt":"2026-10-30T15:55:34.054Z"}],"aiSummary":{"text":"CallBackery for Perl, versions before 0.62.0, leaves a world-readable configuration database dump in /tmp when taking a backup, allowing local users to read user password hashes and application form values. The dump is not removed and can be redirected to a chosen file. A local attacker can exploit this weakness.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T15:11:09.942Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-118990"}]}}