CVE-2026-118131 CVE-2026-118131

Not scored Published 27 Oct 2026 Updated 27 Oct 2026

Exploited in the wild: Not known
Fix: None listed

What is CVE-2026-118131?

CVE-2026-118131 is a vulnerability in GnuPG, published on 27 Oct 2026.

Official description

GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create the expected GnuPG configuration directory and inject malicious configuration files consumed by GnuPG components. This can result in code execution within the security context of the victim user.

Which versions are affected by CVE-2026-118131?

How do I fix CVE-2026-118131?

No fix has been published for CVE-2026-118131 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-118131 being exploited?

There is no known exploitation of CVE-2026-118131 in the wild and no public exploit code.

Sources

Also known as GHSA-c8cg-36rg-65fq, UBUNTU-CVE-2026-118131.