Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create the expected GnuPG configuration directory and inject malicious configuration files consumed by GnuPG components. This can result in code execution within the security context of the victim user.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🚨Critical - GnuPG Windows Local Config Planting via ProgramData DACL (CVE-2026-118131) GnuPG 2.5.21 for Windows inherits a permissive default DACL on C:\ProgramData, letting BUILTIN\Users create arbitrary subdirs. A low-priv attacker can precreate the expected GnuPG config directory and drop malicious config files that GnuPG components later load, leading to code execution as the victim user. 👉Affected: GnuPG 2.5.21 (Windows)