CVE-2020-5253 LOW

CVE-2020-5253: Privilege escalation in NetHack

Vendor Nethack

Product NetHack

Weakness CWE-184

Published March 10, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

3.9/10

Attack vector Local

Attack complexity High

Privileges required Low

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched in NetHack 3.6.0.

Key dates

02Disclosure timeline

March 10, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-5253 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/184.html

Related vulnerabilities

04Related CVE

CVE-2026-42590 Gotenberg: ExifTool group-prefix syntax bypasses dangerous-tag blocklist CVE-2026-43566 OpenClaw 2026.4.7 < 2026.4.14 - Privilege Escalation via Untrusted Webhook Wake Events CVE-2026-31993 OpenClaw < 2026.2.22 - Allowlist Parsing Mismatch in system.run Shell Chains CVE-2026-41915 OpenClaw < 2026.4.8 - Git Environment Variable Injection via Unfiltered Exec Environment CVE-2026-4509 PbootCMS File Upload file.php incomplete blacklist