CVE-2012-0863: Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files...

Security readout for executives and security teams

Mumble 1.2.3 and earlier could store its local SQLite configuration database with permissions that let other local users read it. That file may contain cleartext passwords and configuration data. The main risk is credential exposure on shared systems, not remote takeover. Exposure is most likely on Linux or Unix-like multi-user systems where Mumble 1.2.3 or earlier was installed and users ran the client. Single-user desktops have lower practical risk, but any shared workstation, lab host, terminal server, or managed desktop image deserves review. Treat this as a focused hygiene issue, not an enterprise-wide emergency. Prioritize shared Linux systems and any environment where local user separation matters. The main business concern is leakage of voice-server credentials or reused passwords. Mitigation focus: Upgrade Mumble using vendor packages or guidance for affected distributions.; Check Mumble upstream and OS vendor advisories for the fixed version.; Restrict access to existing `.mumble.sqlite` files so only the owning user can read them..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.