Is CVE-2026-6390 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-6390 being exploited in the wild.

How severe is CVE-2026-6390?

Medium severity, with a CVSS score of 6.8, published 23 July 2026.

Which products and versions are affected?

Red Hat Enterprise Linux 10 affected; Red Hat Enterprise Linux 6 affected; Red Hat Enterprise Linux 7 affected; Red Hat Enterprise Linux 8 affected; and 3 more.

Is there a fix for CVE-2026-6390?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-6390 attacked?

It is attacked with local access, in an operating system.

Am I affected by CVE-2026-6390?

Check whether you run Gnu Nano. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-6390: GNU nano format string vulnerability in multi-buffer error handling

CVE-2026-6390 · Severity: medium · CVSS 6.8 · Published 2026-07-23

A security vulnerability exists in the GNU nano text editor, a common tool used for editing configuration files on Linux systems. If a user is tricked into opening a set of files where one has a specially crafted name, the application may crash or allow unauthorized access to system memory. This could lead to the disclosure of sensitive information or allow an attacker to gain further control over the system.

Vendors: Gnu.

Quick answers

Is CVE-2026-6390 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-6390 being exploited in the wild.
How severe is CVE-2026-6390?: Medium severity, with a CVSS score of 6.8, published 23 July 2026.
Which products and versions are affected?: Red Hat Enterprise Linux 10 affected; Red Hat Enterprise Linux 6 affected; Red Hat Enterprise Linux 7 affected; Red Hat Enterprise Linux 8 affected; and 3 more.
Is there a fix for CVE-2026-6390?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-6390 attacked?: It is attacked with local access, in an operating system.
Am I affected by CVE-2026-6390?: Check whether you run Gnu Nano. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A format string vulnerability (CWE-134) exists in GNU nano's multi-buffer error message handling. The flaw is triggered when a user opens multiple files at startup and one of those files triggers an ALERT-level error; if the filename contains printf format specifiers, they are reinterpreted by the application. An attacker can exploit this by providing a malicious filename to a user, potentially leading to stack information disclosure, a denial of service (crash), or arbitrary memory writes. The vulnerability requires local access and user interaction (opening the malicious file).

Affected products

Red Hat Enterprise Linux 10 affected
Red Hat Enterprise Linux 6 affected
Red Hat Enterprise Linux 7 affected
Red Hat Enterprise Linux 8 affected
Red Hat Enterprise Linux 9 affected
Red Hat OpenShift Container Platform 4 affected
GNU nano

Timeline

2026-04-15: disclosed: Initial report in Red Hat Bugzilla
2026-07-23: advisory: CVE published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.