EIP-2026-103045
PRE-CVExNBD - '/tmp/xnbd.log' Insecure Temporary File Handling
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103045. PoCs published by Sebastian Pipping.
AI-analyzed exploit summary This exploit demonstrates a symbolic-link attack against xNBD due to insecure handling of temporary files. By creating a symlink from /tmp/xnbd.log to a target file, an attacker can overwrite arbitrary files with the privileges of the xnbd-server process.
Description
xNBD - '/tmp/xnbd.log' Insecure Temporary File Handling
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Sebastian Pipping · textlocallinux
https://www.exploit-db.com/exploits/38298
This exploit demonstrates a symbolic-link attack against xNBD due to insecure handling of temporary files. By creating a symlink from /tmp/xnbd.log to a target file, an attacker can overwrite arbitrary files with the privileges of the xnbd-server process.
Classification
Working Poc 90%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target:
xNBD (version not specified)
No auth needed
Prerequisites:
Local access to the system · Ability to create symlinks in /tmp · xnbd-server running with elevated privileges
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026