{"schema":"threatline.record/2","record":{"id":"CVE-2026-116271","aliases":[],"summary":"MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment writes","details":"MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment writes.\n\nEach message is written to a directory named msg-<time>-<pid>-<n> under the output base, and an existing directory of that name is used as is. A file name counts as unused when nothing exists at that path, which holds for a dangling symlink, and the body file is then opened in a way that follows the link.\n\nWhen the output base is writable by other users, as with output_under(\"/tmp\"), a local user can pre-create the directory with a symlink named like an attachment. The parser then writes the attachment to the link target with the privileges of the parsing process.","categories":["Unclassified"],"product":"","vendor":"","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-116271","source_modified_at":"2026-10-28T17:34:06.757Z","fetched_at":"2026-10-28T20:58:01.013507Z","product":null,"vendor":null,"versions":[{"lessThan":"5.521","status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-116271","source_modified_at":"2026-10-28T17:34:06.757Z","fetched_at":"2026-10-28T20:58:01.013507Z","package":{"name":null,"ecosystem":null},"version":"5.521","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T17:34:06.757Z","modified_at":"2026-10-28T17:34:06.757Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-116271","fetched_at":"2026-10-28T20:58:01.013507Z","source_modified_at":"2026-10-28T17:34:06.757Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://metacpan.org/release/DSKOLL/MIME-tools-5.521/changes","tags":["release-notes"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-28T17:34:06.757Z","content_hash":"66015a4b943e186cfed6dce8df63a4988d1b8dd3e675620600c6e0d4d9ac3a05"}}