A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the "~/.local" directory. This allows the attacker to inject a malicious ".desktop" launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.