Threats tagged 'brew-gam-cve-2026-112941'

CVE-2026-112941 describes a local integrity vulnerability in the SoftReadWriteLock implementation used by filelock versions 4.1.0 through 4.2.0. A local unprivileged user with write access to the lock's parent directory can replace the lock directory tree with symbolic links after the lock's initial acquisition, causing the lock user process to write lock records into attacker-controlled paths. This results in the lock user's files being replaced or deleted, breaking functionality such as a git repository's operation. The vulnerability requires specific conditions including directory write access and the presence of sticky bits in parent directories like /tmp. The impact is limited to integrity loss with no confidentiality or availability impact. The CVSS 3.1 base score is 3.3 (Low).