CVE-2026-112913 | tox-dev filelock up to 4.2.0 ReadWriteLock _read_write.py _connect privileges management

October 26, 2026 Yanac

A vulnerability categorized as problematic has been discovered in tox-dev filelock up to 4.2.0. Affected by this issue is the function _connect of the file src/filelock/_read_write.py of the component ReadWriteLock. Such manipulation leads to improper privilege management.

This vulnerability is referenced as CVE-2026-112913. The attack can only be performed from a local environment. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More