The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
GHSA-cwqr-hh33-gh44: filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout
- Identifiers
- CVE-2026-112915GHSA-cwqr-hh33-gh44
- Published
- Record updated
- Affected
- filelock >= 3.20.4, <= 4.2.0
- Fixed in
- 4.2.1
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
filelock's SQLite-backed ReadWriteLock and AsyncReadWriteLock run PRAGMA journal_mode=MEMORY on every acquire, which makes SQLite load the schema of whatever file is at the lock path. A local user who can place or overwrite that file can make every acquire_read and acquire_write ignore timeout and blocking=False, stalling processes for as long as they choose or indefinitely, with CPU spinning and Ctrl-C ignored. Affected versions are filelock 3.20.4 through 4.2.0; the advisory is GHSA-cwqr-hh33-gh44, scored CVSS 3.1 5.5 (Medium), reported by Anthropic's OSS Scanner as ANT-2026-NFPRHMYJ under CWE-400.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- filelockPyPINo LLM dependency detected · 42 tracked dependents