CWE-276 Incorrect Default Permissions

Nuxt dev server vite-node IPC socket is world-connectable on Linux

Duplicate Advisory: Nuxt dev server vite-node IPC socket is world-connectable on Linux

SurrealDB: Full Table Permissions by Default

Duplicate Advisory: Full Table Permissions by Default

Duplicate Advisory: SurrealDB has Silent Failure to Overwrite Table Definition of Relation Type

Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket

Apache ActiveMQ has an Incorrect Default Permissions vulnerability

YesWiki vulnerable to unauthenticated arbitrary page deletion via `{{erasespamedcomments}}` action

turso-cli persists Turso platform JWT with world-readable (0o644) file permissions

nextflow auth login command has incorrect default permissions

Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)

OpenClaw: Config recovery could restore openclaw.json with broad file permissions

Spring AI: ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage

openclaw-claude-bridge: sandbox is not effective - `--allowed-tools ""` does not restrict available tools

OpenClaw session transcript files were created without forced user-only permissions

Claude SDK for Python has Insecure Default File Permissions in Local Filesystem Memory Tool

operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd

Capgo CLI: symlink-following local secret writes enable arbitrary file overwrite + world-readable credentials (0600 missing)

.NET Elevation of Privilege Vulnerability

Duplicate Advisory: Microsoft Security Advisory CVE-2026-26131 – .NET Elevation of Privilege Vulnerability

AWS CLI: cli_history database does not restrict file permissions on Unix systems

AutoGPT is Vulnerable to RCE via Disabled Block Execution

Pepr Has Overly Permissive RBAC ClusterRole in Admin Mode

XWiki AdminTools application doesn't set permissions on the AdminTools space

ROTP 6.2.2 and 6.2.1 has 0666 permissions for the .rb files.