CVE-2026-111802Medium· 6.6▾ SunlitA flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 36.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume and confirming the prompt to empty the trash, leading to the arbitrary deletion of files accessible to that user.
nautilus (all versions)nautilusnautilus (all versions)nautilus (all versions)nautilus (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Mitigation if available: Do not choose "Empty" or remove the ability to "Empty Trash" upon ejecting USB devices
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-90954High· 7.8A flaw was found in BusyBox's dpkg-deb archive extraction
CVE-2026-108119Medium· 6.3A flaw was found in busybox
CVE-2024-1753High· 8.6A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers
CVE-2026-89096Medium· 5.9Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd
CVE-2026-89085Medium· 6.6Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image
CVE-2026-89088Medium· 5.5Parted: parted: denial of service via heap buffer overflow during fat16 resize