Skip to content
OpenAdvisories

Vendor

nextflow-io

1 known vulnerabilities.

Products

nextflow 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-48722

    Nextflow: Incorrect default permissions in the nextflow auth login command

    Nextflow is a DSL for data-driven computational pipelines. From 25.09.2-edge until 25.10.6 and 26.04.3, nextflow auth login writes Seqera Platform OIDC bearer tokens to ${NXF_HOME:-~/.nextflow}/seqera-auth.config through AuthCommandImpl.writeConfig in plugins…

    nextflow-io nextflow io.nextflow:nextflow Maven