CVE-2026-41051

csync2 uses insecure temporary directories when compiled with C99 or later

Medium · published May 13, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00102 · 0.9th percentile
Published
2026-05-13T08:37Z
EPSS history
Timeline
  • 13 MAY 08:37Z
    csync2 uses insecure temporary directories when compiled with C99 or later
    cvelistv5