Critical severity9.1NVD Advisory· Published Aug 4, 2023· Updated Jun 17, 2026

CVE-2023-39107

Description

An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nomachine/NoMachine Free Editionllm-fuzzy
Range: <8.8.1
Nomachine/NoMachine Enterprise Clientllm-fuzzy
Range: <8.8.1
NoMachine/Free Edition and Enterprise Clientdescription
Nomachine/Nomachine
cpe:2.3:a:nomachine:nomachine:*:*:*:*:*:*:*:*
Range: <8.8.1

Patches

Vulnerability mechanics

References

www.ns-echo.com/posts/nomachine_afo.htmlnvdExploit
kb.nomachine.com/TR07U10948nvdVendor Advisory
kb.nomachine.com/SU07U00247nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000