CVE-2026-102740

A flaw was found in AsyncHttpClient. Resumable download state is stored in a predictable shared temporary directory with insecure permissions and link-following file operations. A local attacker can exploit this issue by placing a symbolic link in the shared location to overwrite arbitrary files...