Threats tagged 'brew-virtualenvwrapper-cve-2026-112941'

CVE-2026-112941 is a local integrity vulnerability in filelock versions 4.1.0 through 4.2.0 involving SoftReadWriteLock and AsyncSoftReadWriteLock. A local user with write access to the lock's parent directory can replace the lock directory tree with one containing symbolic links after the first lock acquire. This causes the lock user’s process to write lock records through these symbolic links, resulting in unintended file modifications in directories writable by the lock user. The issue requires no race condition and affects Linux and POSIX platforms. The vulnerability has low CVSS impact, with no confidentiality or availability impact, only low integrity impact due to replacement of lock-related files.