Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-118990— CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup

Quick assessment

Affected
CVE-2026-118990
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Perl 版本的 CallBackery 在 0.62.0 之前的版本中，当执行配置备份时，会在 目录下生成一个任何用户均可读取的配置数据库转储文件。 具体而言， 函数会调用 SQLite3 命令行工具，将数据库转储到 （其中 为进程 ID），且该文件在生成后从未被删除。该文件的权限由当前进程的 umask 决定，攻击者若提前在该可预测的文件名位置创建符号链接，即可诱导转储操作将数据写入其指定的目标文件。 该转储文件包含所有用户的密码哈希值以及应用程序表单中保存的所有数据。任何本地用户在系统执行过备份操作后，均可读

AI Predicted 6.4 Difficulty: Trivial

Affected Version Matrix 1

VendorProduct Version RangeStatus
None None < 0.62.0 affected

I. Basic Information for CVE-2026-118990

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup
Source: CVE Program / CVE List V5
Vulnerability Description
CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup. getConfigBlob() has the sqlite3 shell write the dump to /tmp/cbdump<pid> and never removes it. The file takes the process umask, and a symlink planted at that predictable name is followed. The dump holds every user's password hash and every value saved by the application's forms. A local user can read these after any backup, and may redirect the dump to a file of their choosing.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
在具有不安全权限的目录中创建临时文件
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- - 0 ~ 0.62.0 -

II. Public POCs for CVE-2026-118990

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-118990

请登录查看更多情报信息。

Other References for CVE-2026-118990 (1)

IV. Related Vulnerabilities

Same weakness: CWE-379