{"id":"CVE-2026-118990","published":"2026-10-30T13:18:31.763","lastModified":"2026-10-30T17:08:54.633","description":"CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup.\n\ngetConfigBlob() has the sqlite3 shell write the dump to /tmp/cbdump<pid> and never removes it. The file takes the process umask, and a symlink planted at that predictable name is followed.\n\nThe dump holds every user's password hash and every value saved by the application's forms. A local user can read these after any backup, and may redirect the dump to a file of their choosing.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-59","CWE-379"],"vendors":[],"products":[],"references":[{"url":"https://metacpan.org/release/OETIKER/CallBackery-0.62.0/changes","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}