Threats tagged 'brew-gam-cve-2026-112910'

The filelock library on Windows ignores the specified file mode (e.g., 0o600) when creating lock files and the ReadWriteLock database. Instead of applying restrictive permissions, the created files inherit the directory's ACL, potentially allowing other local accounts with inherited access to read or modify these lock files. This can lead to partial confidentiality, integrity, and availability impacts, such as unauthorized reading of lock metadata, corruption of lock state, and denial of lock acquisition by the legitimate owner. The issue affects filelock versions 3.10.0 through 4.2.0 on Windows.