CVE-2026-6843

MediumCVSS 5.5

Published: 22/04/2026(UTC)Updated: 01/09/2026(UTC)Translated: 31/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

A format string vulnerability was found in nano's `statusline()` function. A local user could create a directory with a name containing printf specifiers, causing a segmentation fault (SEGV) and denial of service (DoS).

Risk Assessment

A local attack can crash the nano editor, disrupting user work and potentially causing loss of unsaved data.

Recommendation

Update nano to the latest patched version and restrict local access to trusted users.

Other vulnerabilities in nano

CVE-2026-6842Low
A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.

Original NVD description (English source)

A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By creating a directory with a name containing `printf` specifiers, the application attempts to display this name, leading to a segmentation fault (SEGV). This results in a Denial of Service (DoS) for the `nano` application.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS