CVE-2026-32810: Rust Insecure Default File Permissions

Files or directories are being created using generic, convenience API functions (`std::fs::write`, `std::fs::create_dir_all`, etc.) that rely entirely on the system's default umask on Unix architectures. This commonly results in world-readable permissions (e.g., 0644 or 0755), introducing a significant risk of exposing sensitive data such as configurations,

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Rust
greprules fetch cve-2026-32810-rust-insecure-default-file-permissions --engine opengrep

Description

Files or directories are being created using generic, convenience API functions (`std::fs::write`, `std::fs::create_dir_all`, etc.) that rely entirely on the system's default umask on Unix architectures. This commonly results in world-readable permissions (e.g., 0644 or 0755), introducing a significant risk of exposing sensitive data such as configurations,