CVE-2026-32810
Halloy is an IRC application written in Rust.
Published Mar 20, 2026 · updated Jun 17, 2026 · halloy halloy
Halloy is an IRC application written in Rust. In versions on \*nix and macOS prior to commit f180e41061db393acf65bc99f5c5e7397586d9cb, halloy creates its config directory and files using default umask permissions, which typically results in on files and on directories. This allows any local user on the system to read plaintext credentials stored in or referenced paths. Commit f180e41061db393acf65bc99f5c5e7397586d9cb patches the issue.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 20, 2026 · NIST NVD
Detected
Halloy is an IRC application written in Rust. In versions on \*nix and macOS prior to commit f180e41061db393acf65bc99f5c5e7397586d9cb, halloy creates its config directory and files using default umask permissions, which typically results in on files and on directories. This allows any local user on the system to read plaintext credentials stored in or referenced paths. Commit f180e41061db393acf65b
Jun 17, 2026 · NIST NVD
Updated
Halloy is an IRC application written in Rust. In versions on \*nix and macOS prior to commit f180e41061db393acf65bc99f5c5e7397586d9cb, halloy creates its config directory and files using default umask permissions, which typically results in on files and on directories. This allows any local user on the system to read plaintext credentials stored in or referenced paths. Commit f180e41061db393acf65b
Affected
- cpe halloy/halloyversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-32810
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-32810
Halloy is an IRC application written in Rust. In versions on \*nix and macOS prior to commit f180e41061db393acf65bc99f5c5e7397586d9cb, halloy creates its config directory and files using default umask permissions, which typically results in on files and on directori
nvd.nist.gov