CVE-2026-112938 | tox-dev filelock up to 4.2.0 File Lock src/filelock/_strict.py StrictSoftFileLock._acquire race condition

October 29, 2026 Yanac

A vulnerability marked as problematic has been reported in tox-dev filelock up to 4.2.0. This affects the function StrictSoftFileLock._acquire of the file src/filelock/_strict.py of the component File Lock. The manipulation leads to race condition enabling link following.

This vulnerability is listed as CVE-2026-112938. The attack must be carried out locally. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More