CVE-2026-22701

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...

collabi (0.0.5), intelecy-chocolate (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-22701 via filelock (2.0.13)

filelock PYPI version 2.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - collabi 0.0.5 - intelecy-chocolate =0.1.0, =0.1.20, =0.1.23 Source cves: CVE-2026-22701 Source advisory: OSV:GHSA-QMGC-5H2G-MVRW...

31 (2.3.0), abaco (0.1.0) +849 more potentially affected by CVE-2026-22701 via filelock (>=3.0.4, <=3.20.2)

filelock PYPI version =3.0.4, =1.0.5, =0.1.0, =0.1.3, =1.3.0, =0.1.0, =0.2.0, =0.6.5, =0.0.2, =1.0.9, =0.87.2.dev9, =0.87.3.dev4 and more Source cves: CVE-2026-22701 Source advisory: OSV:GHSA-QMGC-5H2G-MVRW...

31 (2.3.0), abaco (0.1.0) +849 more potentially affected by CVE-2026-22701 via filelock (>=3.0.4, <=3.20.2)

filelock PYPI version =3.0.4, =1.0.5, =0.1.0, =0.1.3, =1.3.0, =0.1.0, =0.2.0, =0.6.5, =0.0.2, =1.0.9, =0.87.2.dev9, =0.87.3.dev4 and more Source cves: CVE-2026-22701 Source advisory: GHSA-QMGC-5H2G-MVRW...

EUVD-2026-1870

filelock Time-of-Check-Time-of-Use TOCTOU Symlink Vulnerability in SoftFileLock...

SUSE CVE-2026-22701

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...

OPENSUSE-SU-2026:10043-1 python311-filelock-3.20.3-1.1 on GA media

These are all security issues fixed in the python311-filelock-3.20.3-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-68146 affecting package python-filelock for versions less than 3.20.1-1

CVE-2025-68146 affecting package python-filelock for versions less than 3.20.1-1. An upgraded version of the package is available that resolves this issue...

31 (2.3.0), abaco (0.1.0) +849 more potentially affected by CVE-2026-22701 via filelock (>=3.0.4, <=3.20.2)

filelock PYPI version =3.0.4, =1.0.5, =0.1.0, =0.1.3, =1.3.0, =0.1.0, =0.2.0, =0.6.5, =0.0.2, =1.0.9, =0.87.2.dev9, =0.87.3.dev4 and more Source cves: CVE-2026-22701 Source advisory: SNYK:PYTHON-FILELOCK-14912448...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via a race condition in the acquire method. An attacker can cause lock operations to fail or behave unexpectedly by creating a symlink at the lock file path between the permission check and file creation. Remediation...

CVE-2026-22701

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...

AZL-79235 CVE-2026-22701 affecting package python-filelock 3.0.12-13

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...

AZL-74234 CVE-2026-22701 affecting package python-filelock for versions less than 3.20.3-1

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...

UBUNTU-CVE-2026-22701

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...

CVE-2026-22701

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...

CVE-2026-22701

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...

31 (2.3.0), abaco (0.1.0) +852 more potentially affected by CVE-2026-22701 via filelock (>=2.0.13, <=3.20.2)

filelock PYPI version =2.0.13, =1.0.5, =0.1.0, =0.1.3, =1.3.0, =0.1.0, =0.2.0, =0.6.5, =0.0.2, =1.0.9, =0.87.2.dev9, =0.87.3.dev4 and more Source cves: CVE-2026-22701 Source advisory: MEND:CVE-2026-22701...

CVE-2026-22701

Summary of CVE-2026-22701 (python-filelock) A TOCTOU race condition affects the SoftFileLock implementation in python-filelock prior to version 3.20.3. With local filesystem access and the ability to create symlinks, an attacker can exploit a race between the permission validation and file creati...

CVE-2026-22701 filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...

CVE-2026-22701

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...