CVE-2026-65061— Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| EGOR | Data::ReqRep::Shared | < 0.05 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-65061
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW
Source: CVE Program / CVE List V5
Vulnerability Description
Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in reqrep.h with open(path, O_RDWR | O_CREAT, 0666), for both the request-reply and the integer-variant segments. The mode is 0666, so under the default umask 022 the file is created mode 0644 (world-readable). O_NOFOLLOW is absent, so a symlink planted at the path is followed, and O_EXCL is absent, so the open silently uses a pre-planted file instead of failing. A "Shared" segment naturally lives in a shared directory such as /tmp or /dev/shm, where any local user can read the IPC payloads stored in the world-readable segment, and a pre-planted file or symlink at the path lets a local attacker win a pre-creation race or redirect the open.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
关键资源的不正确权限授予
Source: CVE Program / CVE List V5
Vulnerability Title
EGOR Data::ReqRep::Shared 后置链接漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
EGOR Data::ReqRep::Shared是EGOR个人开发者的一款消息队列中间件。 EGOR Data::ReqRep::Shared 0.05之前版本存在安全漏洞，该漏洞源于创建可被全局读取的mmap备份文件且未使用O_EXCL或O_NOFOLLOW标志，可能导致本地攻击者通过预置文件或符号链接赢得创建前竞争或重定向打开操作。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| EGOR | Data::ReqRep::Shared | 0 ~ 0.05 | - |
II. Public POCs for CVE-2026-65061
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-65061
请登录查看更多情报信息。
Other References for CVE-2026-65061 (1)
Same Patch Batch · EGOR · 2026-07-21 · 23 CVEs total
| CVE-2026-59145 | Data::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalid | |
| CVE-2026-65068 | Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backi | |
| CVE-2026-65062 | Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing | |
| CVE-2026-65065 | Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap bac | |
| CVE-2026-65069 | Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backi | |
| CVE-2026-65066 | Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backin | |
| CVE-2026-65063 | Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing | |
| CVE-2026-65067 | Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing fi | |
| CVE-2026-65064 | Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing f | |
| CVE-2026-59147 | Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writ | |
| CVE-2026-59143 | Data::RoaringBitmap::Shared versions before 0.02 for Perl allow an out-of-bounds read via | |
| CVE-2026-59140 | Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unva | |
| CVE-2026-59146 | Data::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writ | |
| CVE-2026-59144 | Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via a | |
| CVE-2026-64613 | Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing fi | |
| CVE-2026-64617 | Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing fi | |
| CVE-2026-64615 | Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing fil | |
| CVE-2026-64614 | Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing fil | |
| CVE-2026-64616 | Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing f | |
| CVE-2026-59139 | Data::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read via an unva |
Showing top 20 of 23 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: EGOR
- CVE-2026-65069
Data::DisjointSet::Shared versions before 0.02 for Perl crea - CVE-2026-65068
Data::SpatialHash::Shared versions before 0.02 for Perl crea - CVE-2026-65067
Data::Intern::Shared versions before 0.02 for Perl create a - CVE-2026-65066
Data::RingBuffer::Shared versions before 0.04 for Perl creat - CVE-2026-65065
Data::RoaringBitmap::Shared versions before 0.02 for Perl cr
Same weakness: CWE-732
- CVE-2026-61892
Weintek cMT3092X Incorrect Permission Assignment for Critica - CVE-2026-63358
FileGator privilege escalation - CVE-2026-65069
Data::DisjointSet::Shared versions before 0.02 for Perl crea - CVE-2026-65068
Data::SpatialHash::Shared versions before 0.02 for Perl crea - CVE-2026-65067
Data::Intern::Shared versions before 0.02 for Perl create a
V. Comments for CVE-2026-65061
No comments yet