CVE-2026-112915

A flaw was found in filelock. When utilizing the ReadWriteLock mechanism, the library attempts to open an SQLite database without properly restricting schema and query operations. A local attacker able to replace the lock database can provide a specially crafted file that causes lock acquisition ...

Linux Distros Unpatched Vulnerability : CVE-2026-112915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock can open a crafted SQLite lock database without bounding schema...

Linux Distros Unpatched Vulnerability : CVE-2026-112940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by name; on POSIX...

Linux Distros Unpatched Vulnerability : CVE-2026-112941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock and AsyncSoftReadWriteLock cache a successful check of the .r...

Linux Distros Unpatched Vulnerability : CVE-2026-112914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock can restore a stale marker by name after moving it aside, allowing...

Linux Distros Unpatched Vulnerability : CVE-2026-112939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can trust a forged process identifier in a marker that an attacke...

Linux Distros Unpatched Vulnerability : CVE-2026-112911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, StrictSoftFileLock versions from 3.30.0 and SoftReadWriteLock versions from...

Linux Distros Unpatched Vulnerability : CVE-2026-112936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock pat...

Linux Distros Unpatched Vulnerability : CVE-2026-112912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 3.32.6 until 4.2.1, SoftFileLock can follow a swapped symbolic link during the conditional os.acce...

Linux Distros Unpatched Vulnerability : CVE-2026-112934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 4.0.0 until 4.2.1, SoftReadWriteLock refreshes holder records by name, allowing another local user...

Linux Distros Unpatched Vulnerability : CVE-2026-112906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock versions from 4.1.0 can reuse a stale observation when an attacker...

Linux Distros Unpatched Vulnerability : CVE-2026-112909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular file renamed onto the lock path when another local...

CVE-2026-112940

A flaw was found in filelock. When utilizing the ReadWriteLock mechanism, the component reopens SQLite database and auxiliary files by file path rather than retaining secure file descriptors. A local attacker with file renaming permissions in a shared directory can swap these filenames during...

CVE-2026-112936

A flaw was found in filelock. The ReadWriteLock component does not properly reject symbolic links shortcuts pointing to another file path when resolving lock paths. A local user with write permissions in the lock directory can exploit this vulnerability to redirect lock file creation and database...

CVE-2026-112941

A flaw was found in filelock. The SoftReadWriteLock and AsyncSoftReadWriteLock mechanisms cache an initial directory check but resolve path names again during subsequent record operations. A local attacker can exploit this behavior by replacing the lock directory structure after its initial...

CVE-2026-112912

A flaw was found in filelock. When SoftFileLock verifies file permissions during lock acquisition, it may follow an untrusted symbolic link. A local attacker could exploit this behavior in shared directories to infer whether a target file path exists and is writable, resulting in unauthorized...

CVE-2026-112939

A flaw was found in filelock. The SoftFileLock component can trust a forged process identifier PID in a lock marker file that an attacker can modify. A local attacker can exploit this flaw to cause an authorized process to act as a confused deputy, improperly removing an active lock marker and...

CVE-2026-112906

A flaw was found in filelock. A local attacker can manipulate lock file timestamps when multiple processes are waiting for a lock, causing the SoftFileLock component to misidentify an active lock as expired. As a result, legitimate lock files can be prematurely removed, allowing unauthorized...

CVE-2026-112935

A flaw was found in filelock. A local attacker can exploit a race condition in the SoftFileLock mechanism during stale lock cleanup. Under specific timing and file system conditions involving reused file nodes, filelock may mistakenly delete an active lock marker held by another process. This...

CVE-2026-112914

A flaw was found in filelock. A local attacker with write access to a shared lock directory can exploit the SoftFileLock mechanism to cause unauthorized file exposure. When filelock restores a stale lock marker by name, the attacker can swap in a symbolic link, causing the victim's process to...