CVE-2026-118131
CVE-2026-118131
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create the expected GnuPG configuration directory and inject malicious configuration files consumed by GnuPG components. This can result in code execution within the security context of the victim user.
| Vendor | gnupg |
| Product | gnupg |
| Published | Oct 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for gnupg gnupg
Be the first to know when new unknown vulnerabilities affecting gnupg gnupg are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
GnuPG / GnuPG
2.5.21