CVE-2026-112908 | tox-dev filelock up to 4.2.0 StrictSoftFileLock src/filelock/_strict.py _ensure_protocol_directory permission assignment

October 29, 2026 Yanac

A vulnerability labeled as problematic has been found in tox-dev filelock up to 4.2.0. Affected by this issue is the function _ensure_protocol_directory of the file src/filelock/_strict.py of the component StrictSoftFileLock. Executing a manipulation can lead to incorrect permission assignment.

This vulnerability is tracked as CVE-2026-112908. The attack is restricted to local execution. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More