CVE-2011-2916: Qtnx Project Qtnx

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

qtnx 0.9 stores non-custom SSH keys in a world-readable configuration file. If a user has a world-readable or world-executable home directory, another local system user could obtain the private key used to connect to remote NX sessions.

Affected products

• Qtnx Project Qtnx: version 0.9 only

Published 2019-11-15. Last modified 2026-06-16.