CVE-2026-129119
C-Kermit 6.0.192 before 11.1.515 File Collision Protection Bypass via RESEND
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
C-Kermit from 6.0.192 before 11.1.515 contains a file collision protection bypass that allows malicious senders to append data to existing files by marking transfers as RESEND. The gattr() function in ckcfn3.c clears the REJECT discard flag and switches to APPEND without a RECEIVE CONFIRM prompt, letting attackers modify files such as shell startup files.
| CWE | CWE-863 |
| Vendor | openkermit |
| Product | c-kermit |
| Published | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for openkermit c-kermit
Be the first to know when new medium vulnerabilities affecting openkermit c-kermit are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
Affected Versions
OpenKermit / C-Kermit
6.0.192 < 11.1.515
References
github.com: https://github.com/OpenKermit/ckermit/security/advisories/GHSA-vhrv-7jrq-95qj github.com: https://github.com/OpenKermit/ckermit/commit/bbf9923e3e2e04ac3da713998cb15e786e26fdf1 github.com: https://github.com/OpenKermit/ckermit/releases/tag/v11.1.515 github.com: https://github.com/OpenKermit/ckermit/blob/v11.0.514/ckcfn3.c#L1798-L1800 vulncheck.com: https://www.vulncheck.com/advisories/c-kermit-6.0.192-before-11.1.515-file-collision-protection-bypass-via-resend
Credits
John Goerzen John Goerzen