Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-112909

filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular file renamed onto the lock path when another local user has actual rename permission, or hard-linked there under a permissive hard-link policy; when an explicit mode is requested, affected versions from 3.10.2 can also change that file's mode. This issue is fixed in version 4.2.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 11.4%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2026-112909


Contact Us

Shodan ® - All rights reserved