CVE-2026-122136

MEDIUM 4.4

Powerlevel10k before 1.20.19 Symlink Following via Instant Prompt Temporary File

CVSS Score

4.4

EPSS Score

0.0%

EPSS Percentile

0th

Powerlevel10k before 1.20.19 contains a symlink following vulnerability in _p9k_dump_instant_prompt that allows local attackers to overwrite victim-writable files via a predictable temporary path. Attackers can pre-plant symlinks at p10k-instant-prompt-output-<user>-<pid> in TMPDIR, guessing the victim's shell PID, so shell startup truncates and overwrites targeted files.

CWE	CWE-59
Vendor	romkatv
Product	powerlevel10k
Published	Nov 4, 2026

Stay Ahead of the Next One

Get instant alerts for romkatv powerlevel10k

Be the first to know when new medium vulnerabilities affecting romkatv powerlevel10k are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Affected Versions

romkatv / powerlevel10k

0 < 1.20.19

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/romkatv/powerlevel10k/issues/2972 github.com: https://github.com/romkatv/powerlevel10k github.com: https://github.com/romkatv/powerlevel10k/commit/7ddd1b2715c3844275214347a3572ac1fdd6dc39 github.com: https://github.com/romkatv/powerlevel10k/blob/v1.20.0/internal/p10k.zsh#L6445-L6452 vulncheck.com: https://www.vulncheck.com/advisories/powerlevel10k-before-1.20.19-symlink-following-via-instant-prompt-temporary-file

Credits

George Chen