Threats tagged 'brew-bbot-cve-2026-112940'

The filelock ReadWriteLock and AsyncReadWriteLock components use SQLite databases for locking, but on Linux, SQLite reopens the lock database by name via /proc/self/fd, following symlinks and acting on side files like -journal, -wal, and -shm. This behavior allows a local attacker who can create or rename files in the directory containing the lock database (if it is writable without the sticky bit) to manipulate the lock user's files by planting symlinks or journal files. This can lead to arbitrary file writes, file creation or deletion, and denial of lock acquisition, all with the lock user's privileges. The vulnerability affects filelock versions 3.20.4 through 4.2.0, with the fixed version being 3.0.2_3. The CVSS 3.1 score is 7.1 (High).