Medium severity5.5NVD Advisory· Published Aug 16, 2019· Updated Jun 17, 2026

CVE-2019-15119

Description

lib/install/install.go in cnlh nps through 0.23.2 uses 0777 permissions for /usr/local/bin/nps and/or /usr/bin/nps, leading to a file overwrite by a local user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
ehang.io/npsGo	< 0.23.2	0.23.2

Affected products

Ehang Io/Nps
cpe:2.3:a:ehang-io:nps:*:*:*:*:*:*:*:*
Range: <=0.23.2
cnlh/npsdescription
ghsa-coords2 versions
pkg:golang/ehang.io/nps pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweed
< 0.23.2+ 1 more
- (no CPE)range: < 0.23.2
- (no CPE)range: < 0.0.20250422T181640-1.1

Patches

Vulnerability mechanics

References

github.com/cnlh/nps/commit/7178b3380720e910d283036a8d39879a94105515nvdPatchThird Party AdvisoryWEB
github.com/cnlh/nps/issues/176nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-2vp2-8m5j-4rjxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-15119ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000