CVE-2026-112910 | tox-dev filelock up to 4.2.0 WindowsFileLock src/filelock/_windows.py _open_non_reparse_fd mode permission assignment

October 29, 2026 Yanac

A vulnerability described as problematic has been identified in tox-dev filelock up to 4.2.0. This vulnerability affects the function _open_non_reparse_fd of the file src/filelock/_windows.py of the component WindowsFileLock. The manipulation of the argument mode results in incorrect permission assignment.

This vulnerability is cataloged as CVE-2026-112910. The attack must be initiated from a local position. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More