Every CVE Search/ Get API key

CVE-2026-111802

Nautilus: nautilus: arbitrary file deletion via trash symlink

6.6 Medium

A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume and confirming the prompt to empty the trash, leading to the arbitrary deletion of files accessible to that user.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
High

Exploit likelihood

0.16%Unchanged since Oct 17, 2026
90%50%10%1%

What each source reports

CVE List Score used 6.6

Nautilus: nautilus: arbitrary file deletion via trash symlink

A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume and confirming the prompt to empty the trash, leading to the arbitrary deletion of files accessible to that user.

Record
CVE-2026-111802
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Weakness
CWE-59
Updated
2026-11-06
EUVDEUVD-2026-103191 6.6

A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume and confirming the prompt to empty the trash, leading to the arbitrary deletion of files accessible to that user.

Record
EUVD-2026-103191
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Updated
2026-11-06
GitHub AdvisoriesGHSA-hwmw-p4jp-hmpr 6.6

A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected,...

A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume and confirming the prompt to empty the trash, leading to the arbitrary deletion of files accessible to that user.

Record
GHSA-hwmw-p4jp-hmpr
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Weakness
CWE-59
Updated
2026-11-02
NVD 6.6

A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume and confirming the prompt to empty the trash, leading to the arbitrary deletion of files accessible to that user.

Record
CVE-2026-111802
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Weakness
CWE-59
Updated
2026-11-06
OSVDEBIAN-CVE-2026-111802 6.6

A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume and confirming the prompt to empty the trash, leading to the arbitrary deletion of files accessible to that user.

Record
DEBIAN-CVE-2026-111802
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Updated
2026-11-07
OSVUBUNTU-CVE-2026-111802 6.6

A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume and confirming the prompt to empty the trash, leading to the arbitrary deletion of files accessible to that user.

Record
UBUNTU-CVE-2026-111802
CVSS 3.1
6.6 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nautilus
Debian:12
 All versions, plus listed versions
43.2-143.4-143.4-244.0-144.1-1
Show 45 moreShow less
44.2-144.2.1-144.2.1-244~beta-144~rc-145.0-145.0-245.1-145.2.1-145.2.1-245.2.1-345.2.1-445~beta-145~beta2-145~rc-146.2-146.2-246.2-347.0-147.0-247.0-347.1-147.1-247~beta.1-148.0-148.1-148.1-248.2-148.2-348.3-148.3-248~beta-148~beta-248~rc-148~rc-249.0-149.1-149.1-249.2-149.2-249.3-149~rc-149~rc-249~rc-350.0-1
 None known
nautilus
Debian:13
 All versions, plus listed versions
48.3-249.0-149.1-149.1-249.2-1
Show 13 moreShow less
49.2-249.3-149~rc-149~rc-249~rc-350.0-150.0-250.1-150.1-250.2.2-150.2.2-251.0.1-151.0.1-3
 None known
nautilus
Debian:14
 All versions, plus listed versions
48.3-249.0-149.1-149.1-249.2-1
Show 13 moreShow less
49.2-249.3-149~rc-149~rc-249~rc-350.0-150.0-250.1-150.1-250.2.2-150.2.2-251.0.1-151.0.1-3
 None known
nautilus
Ubuntu:16.04:LTS
 All versions, plus listed versions
1:3.14.2-0ubuntu121:3.14.2-0ubuntu141:3.14.2-0ubuntu151:3.18.2-1ubuntu11:3.18.2-1ubuntu2
Show 10 moreShow less
1:3.18.2-1ubuntu31:3.18.3-0ubuntu11:3.18.4-0ubuntu11:3.18.4-0ubuntu21:3.18.4.is.3.14.3-0ubuntu11:3.18.4.is.3.14.3-0ubuntu21:3.18.4.is.3.14.3-0ubuntu31:3.18.4.is.3.14.3-0ubuntu41:3.18.4.is.3.14.3-0ubuntu51:3.18.4.is.3.14.3-0ubuntu6
 None known
nautilus
Ubuntu:18.04:LTS
 All versions, plus listed versions
1:3.26.0-0ubuntu11:3.26.2-0ubuntu11:3.26.2-0ubuntu3.11:3.26.3-0ubuntu11:3.26.3-0ubuntu2
Show 8 moreShow less
1:3.26.3-0ubuntu31:3.26.3-0ubuntu41:3.26.4-0~ubuntu18.04.11:3.26.4-0~ubuntu18.04.21:3.26.4-0~ubuntu18.04.31:3.26.4-0~ubuntu18.04.41:3.26.4-0~ubuntu18.04.51:3.26.4-0~ubuntu18.04.6
 None known
nautilus
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:3.34.1-1ubuntu11:3.35.90-1ubuntu21:3.35.92-1ubuntu11:3.36.0-1ubuntu11:3.36.1-1ubuntu1
Show 6 moreShow less
1:3.36.1.1-1ubuntu11:3.36.1.1-1ubuntu21:3.36.2-0ubuntu11:3.36.3-0ubuntu11:3.36.3-0ubuntu1.20.04.11:3.36.3-0ubuntu1.20.04.2
 None known
nautilus
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:40.2-1ubuntu11:41.1-1ubuntu11:41.2-1ubuntu11:42~beta-1ubuntu11:42~rc-1ubuntu1
Show 7 moreShow less
1:42.0-1ubuntu21:42.1.1-0ubuntu11:42.2-0ubuntu11:42.2-0ubuntu21:42.2-0ubuntu2.11:42.6-0ubuntu11:42.6-0ubuntu2
 None known
nautilus
Ubuntu:24.04:LTS
 All versions, plus listed versions
1:45~rc-1ubuntu11:45.2.1-4ubuntu11:46~beta-0ubuntu31:46.0-0ubuntu11:46.0-0ubuntu2
Show 6 moreShow less
1:46.1-0ubuntu11:46.2-0ubuntu0.11:46.2-0ubuntu0.21:46.2-0ubuntu0.31:46.4-0ubuntu0.11:46.4-0ubuntu0.2
 None known
nautilus
Ubuntu:26.10
 All versions, plus listed versions
1:50.0-0ubuntu21:50.1-2ubuntu11:50.1-2ubuntu21:51~alpha-0ubuntu11:51~rc-0ubuntu11:51.0.1-0ubuntu21:51.0.1-0ubuntu3
 None known
nautilus
Ubuntu:26.04:LTS
 All versions, plus listed versions
1:49.0-1ubuntu21:49.1-2ubuntu21:49.1-2ubuntu31:50~alpha-0ubuntu21:50~beta-0ubuntu1
Show 5 moreShow less
1:50~rc-0ubuntu11:50.0-0ubuntu11:50.0-0ubuntu21:50.2.2-0ubuntu0.11:50.2.2-0ubuntu0.2
 None known

History

History
RecordedChangedSources
factsCVE List
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-111802 is a medium vulnerability (CVSS 6.6) in Red Hat Enterprise Linux 10, published October 16, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.16%, the 5th percentile. No source names a fixed version.

References

This page doesn't list everything

Left out here: 7 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open