{"affected":[{"defaultStatus":"unaffected","product":"powerlevel10k","source":"CNA: VulnCheck","vendor":"romkatv","versions":[{"lessThan":"1.20.19","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"gitstatus","source":"CNA: VulnCheck","vendor":"romkatv","versions":[{"lessThanOrEqual":"1.5.5","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-122137","cwes":["CWE-377"],"description":"Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install script that reuses attacker-creatable directories when mktemp fails. Local attackers can pre-create the predictable gitstatus-install.tmp directory to replace the extracted gitstatusd binary, which then executes with the victim's privileges.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.4,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":6.7,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793824615143,"publishedAt":1793824615143,"references":[{"source":"CNA: VulnCheck","tags":["issue-tracking"],"url":"https://github.com/romkatv/powerlevel10k/issues/2972"},{"source":"CNA: VulnCheck","tags":["product"],"url":"https://github.com/romkatv/powerlevel10k"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/romkatv/gitstatus/commit/5433ecbb9a572d6c92be9feb33642395fccc782b"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/romkatv/powerlevel10k/commit/98bd39fd335e3f9f560e48e5c1957cb2a6a212c4"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/romkatv/powerlevel10k/blob/v1.20.0/gitstatus/install#L255-L256"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/powerlevel10k-before-1.20.19-insecure-temporary-directory-via-gitstatus-installer"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/romkatv/gitstatus/commit/5433ecbb9a572d6c92be9feb33642395fccc782b"},{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/romkatv/powerlevel10k/commit/98bd39fd335e3f9f560e48e5c1957cb2a6a212c4"}],"revision":"440192bcee527a837b3362ed75445f3f108e50d44047134d06683ff71ca6b895","sources":[{"modifiedAt":1793824615143,"name":"CNA: VulnCheck","retrievedAt":1793826732069,"url":"https://www.cve.org/CVERecord?id=CVE-2026-122137"}],"ssvc":null,"status":"published","title":"Powerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus Installer","updatedAt":1793826732069}