The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
GHSA-6627-m3xw-93mp: filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold
- Identifiers
- CVE-2026-112908GHSA-6627-m3xw-93mp
- Published
- Record updated
- Affected
- filelock >= 3.30.0, <= 4.2.0
- Fixed in
- 4.2.1
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
The `StrictSoftFileLock` and `AsyncStrictSoftFileLock` classes in filelock versions 3.30.0 through 4.2.0 create their claim directories with a bare `mkdir()`, so the caller's `mode` does not apply to them. Another local user with a write bit on those directories can unlink a live holder's `0600` claim files, letting a second process enter the lock while the first still reports `is_locked == True`. The scanner rated it CVSS 5.3 (Medium) under CWE-732 and tracks it as GHSA-6627-m3xw-93mp.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- filelockPyPINo LLM dependency detected · 42 tracked dependents