EIP-2026-102843

PRE-CVE

Geany .18 - Local File Overwrite

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102843. PoCs published by Jeremy Brown.

AI-analyzed exploit summary This exploit leverages a symbolic link vulnerability in Geany 0.18's build script generation to overwrite arbitrary files. The script creates a symlink in the target working directory, which Geany follows when writing its run script, leading to file overwrite.

Description

Geany .18 - Local File Overwrite

Exploits (1)

exploitdb WORKING POC VERIFIED
by Jeremy Brown · bashlocallinux
https://www.exploit-db.com/exploits/10060

This exploit leverages a symbolic link vulnerability in Geany 0.18's build script generation to overwrite arbitrary files. The script creates a symlink in the target working directory, which Geany follows when writing its run script, leading to file overwrite.

Classification
Working Poc 100%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: Geany 0.18
No auth needed
Prerequisites: Ability to create symbolic links in the target directory · Geany 0.18 executing a program in the target directory
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026