An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks.
- https://www.ns-echo.com/posts/nomachine_afo.html
- https://github.com/NSEcho/vos