Vulnerability Details CVE-2026-112911
filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, StrictSoftFileLock versions from 3.30.0 and SoftReadWriteLock versions from 4.0.0 can adopt a protocol directory created first by another local user in a shared parent directory, allowing that user to alter protocol state and admit concurrent holders. This issue is fixed in version 4.2.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 0.6%
CVSS Severity
CVSS v3 Score 6.3
References