High severity8.4NVD Advisory· Published Nov 6, 2026

CVE-2026-123962

Description

In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FreedomBox/freedomboxllm-fuzzy
Range: <26.15

Patches

Vulnerability mechanics

References

alioth-lists.debian.net/pipermail/freedombox-discuss/2026-November/010041.htmlnvd
freedombox.org/about/nvd
salsa.debian.org/freedombox-team/freedombox/-/commit/351b6a5c9b432f29ecab2a74d5426977bca29188nvd

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000