CVE-2023-39107

CriticalCVSS 9.1

Published: 04/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.99%

58th percentile - higher than 58% of all known CVEs

Summary

An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks.

Risk Assessment

This vulnerability could lead to serious security breaches, allowing attackers to modify critical system files.

Recommendation

It is recommended to update NoMachine to version 8.8.1 or later to mitigate this vulnerability.

Original NVD description (English source)

An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks.