Threats Tagged 'brew-onlykey-agent-cve-2026-25645'
View all threats tagged with 'brew-onlykey-agent-cve-2026-25645'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'brew-onlykey-agent-cve-2026-25645'
Click on any threat for detailed analysis and mitigation recommendations
The Requests library's utility function extract_zipped_paths() uses predictable filenames when extracting zip archive contents to the system temporary directory. If a file with the same name already exists, it is reused without validation, allowing a local attacker with write access to the temp directory to substitute a malicious file. Standard usage of the Requests library is not affected; only direct calls to extract_zipped_paths() are vulnerable. The issue is fixed in Requests version 2.33.0 by extracting files to a non-deterministic location. Alternatively, setting TMPDIR to a directory with restricted write access can mitigate the risk. Join the discussion | GCVE Database | 08/24/2026, 17:35:47 UTC Added: 08/23/2026, 13:46:12 UTC |
Showing 1 to 1 of 1 result