The vulnerability in filelock versions >=3.30.0 and <=4.2.0 involves the creation of claim directories without proper restrictive permissions, allowing other local users with write access to these directories to unlink claim files. This can lead to multiple holders believing they have exclusive locks, causing integrity issues. The flaw requires specific environment conditions such as a permissive umask or default ACLs that grant write permissions to other users. The vulnerability has a medium severity with no confidentiality impact but high integrity impact.