In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.

Medium CVSS 4.7

CVECVE-2011-1136

First seen2026-09-14 15:15 UTC

Disclosed2019-11-14 01:15 UTC

Last updated2026-09-14 15:15 UTC

Channel statusauto

Summary

In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).