CVE-2011-1496: Nicholas Marriott Tmux

Medium severity, CVSS 4.6. EPSS: 1% chance of exploitation in the next 30 days.

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.

Affected products

• Nicholas Marriott Tmux: version 1.3 only; version 1.4 only

Published 2011-04-18. Last modified 2026-06-16.