What’s Vulnerable › Vulnerabilities

CVE-2019-15119

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-08-16 · updated 2026-06-17
• Weakness: CWE-732

Description

lib/install/install.go in cnlh nps through 0.23.2 uses 0777 permissions for /usr/local/bin/nps and/or /usr/bin/nps, leading to a file overwrite by a local user.

Affected products

• Ehang-Io Nps: through 0.23.2

References

• https://github.com/cnlh/nps/commit/7178b3380720e910d283036a8d39879a94105515
• https://github.com/cnlh/nps/issues/176
• https://github.com/cnlh/nps/commit/7178b3380720e910d283036a8d39879a94105515
• https://github.com/cnlh/nps/issues/176

Get alerted when CVE-2019-15119 or the next vulnerability affects your stack