BIT-MLFLOW-2025-10279 Privilege Escalation in mlflow/mlflow

In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure world-writable permissions 0o777. This vulnerability allows an attacker with write access to the /tmp directory to exploit a race condition and overwrite .py files in the virtual...

PT-2019-7008

Name of the Vulnerable Software and Affected Versions Slackware versions 14.0 through 14.1 Slackware LLVM versions 3.0-i486-2 through 3.3-i486-2 Description The issue allows remote attackers to execute arbitrary code with root privileges due to world-writable permissions on the /tmp directory...

CVE-2013-7171: Improper Input Validation

Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute arbitrary code with root privileges...