TI-2025-08999 CVE-2025-9810 · GHSA-rj4f-7f4c-6qh7
TOCTOU race in Linenoise enables arbitrary file overwrite and permission changes
Priority LOW 29
TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path and subsequent chmod() on the same path.