Path Traversal Vulnerability in nnn File Manager

Executive Summary

The vulnerability in nnn involves improper sanitization of the path variable. An attacker can create a directory with a name containing a single quote followed by shell syntax on a shared filesystem, removable media, or inside an archive. When a victim enters this directory and uses batch copy or move operations, the crafted directory name is inserted into a shell command, leading to arbitrary code execution with the privileges of the nnn process.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if nnn version 5.2 is installed on your system. You can run the command 'nnn -v' to verify the version. If you are using version 5.2, the system is vulnerable. Additionally, inspect directories with unusual names containing special characters like single quotes.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows an attacker to execute arbitrary commands on your system if you interact with a maliciously named directory using nnn's batch copy or move features. The impact includes potential data theft, system compromise, or further network infiltration, depending on the attacker's goals and your system permissions.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized code execution through directory traversal and shell injection. If exploited, it may lead to unauthorized data access, modification, or exfiltration, violating confidentiality and integrity requirements under these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update nnn to a patched version if available. Avoid using batch copy or move workflows in nnn until the issue is resolved. Do not enter directories with suspicious names containing special characters.

Useful 0 Not Useful 0