CVE-2026-64614
Received Received - Intake

Insecure File Permissions in Data::Deque::Shared Perl Module

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: CPANSec

Description
Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in deque.h with open(path, O_RDWR|O_CREAT, 0666). The mode is 0666, so under the default umask 022 the file is created mode 0644 (world-readable). O_NOFOLLOW is absent, so a symlink planted at the path is followed, and O_EXCL is absent, so the open silently uses a pre-planted file instead of failing. A "Shared" segment naturally lives in a shared directory such as /tmp or /dev/shm, where any local user can read the IPC payloads stored in the world-readable segment, and a pre-planted file or symlink at the path lets a local attacker win a pre-creation race or redirect the open.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-22
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-64614
EUVD
EUVD-2026-46370

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-732 The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Perl Data::Deque::Shared module versions before 0.06. It creates a world-readable memory-mapped file without proper protections. The file is opened with mode 0666, making it readable by all users under default settings. The lack of O_EXCL and O_NOFOLLOW flags allows attackers to exploit race conditions or symlink attacks to access sensitive data stored in shared directories like /tmp.

Detection Guidance

Check for world-readable files in shared directories like /tmp or /dev/shm with names matching Data::Deque::Shared patterns. Look for files with mode 0644 created by Perl applications. Use commands like 'find /tmp -type f -perm 0644 -ls' or 'ls -la /dev/shm' to inspect permissions.

Impact Analysis

If you use Perl applications relying on Data::Deque::Shared before version 0.06, local attackers could read sensitive data stored in memory-mapped files. This includes IPC payloads or other confidential information. Attackers might also manipulate file paths to redirect operations or access unauthorized data through race conditions.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. GDPR mandates strict data protection, and HIPAA requires safeguards for protected health information. A breach via this flaw may result in non-compliance, legal penalties, and reputational damage.

Mitigation Strategies

Update Data::Deque::Shared to version 0.06 or later. Remove any existing world-readable files in shared directories. Set stricter umask (e.g., 0077) to prevent world-readable files. Use O_EXCL and O_NOFOLLOW flags in file creation code.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64614. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart