An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks.
https://www.ns-echo.com/posts/nomachine_afo.html
https://kb.nomachine.com/TR07U10948