CVE-2026-110234 [MEDIUM] – Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local us

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user’s files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim’s Elio process ID can plant a symlink so previewing media, fonts or archives truncates and overwrites victim-owned files.