Vifm vulnerabilities
We track 1 vulnerability in Vifm products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 13, 2026.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest Vifm vulnerabilities
- 7.3 High severity
vifm: Unverified Ownership
Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC pac