CVE-2025-13566

Low

Description

A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function show_content_in_floating_window/run_cmd_as_plugin of the file nnn/src/nnn.c. The manipulation leads to double free. An attack has to be approached locally. The identifier of the patch is 2f07ccdf21e705377862e5f9dfa31e1694979ac7. It is suggested to install a patch to address this issue.

SeverityLow

CVSS3.3

Exploit probability—

ProductJarun Nnn

PublishedNov 23, 2025

First seenNov 23, 2025

Weakness typeCWE-415CWE-415 CWE-119Memory buffer bounds error

How to fix

Patches

github.com/jarun/nnn/commit/2f07ccdf21e705377862e5f9dfa31e1694979ac7

Affected products

Product	Affected versions	Fixed in
jarun nnn	5.0, 5.1	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.