CVE-2023-39107

PoC —

CVSS 3.1

9.1 critical

EPSS

1%p67

Published

Aug 4, 2023 (Aug 4, 2023)

Modified

Jun 17, 2026

Description

An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks.

Vendors: nomachine
Products: nomachine
Weakness: CWE-59
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.