CVE-2026-122137 | romkatv Powerlevel10k up to 1.20.18 Install Script gitstatus/install mktemp temp file

November 4, 2026 Yanac

A vulnerability was found in romkatv Powerlevel10k up to 1.20.18. It has been declared as problematic. This impacts the function mktemp of the file gitstatus/install of the component Install Script. The manipulation results in insecure temporary file.

This vulnerability is known as CVE-2026-122137. Attacking locally is a requirement. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More