Search/CVE-2026-112911
● CVE — Medium

CVE-2026-112911

Vendortox-devProductfilelockDiscoveredOct 20, 2026UpdatedOct 28, 2026

filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, StrictSoftFileLock versions from 3.30.0 and SoftReadWriteLock versions from 4.0.0 can adopt a protocol directory created first by another local user in a shared parent directory, allowing that user to alter protocol state and admit concurrent holders. This issue is fixed in version 4.2.1.

View graph Watch Export
CVSS v3.1
6.3 MEDIUM
EPSS
0.15%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Oct 23, 2026 → Oct 26, 2026
▲ 0.04pp
0.11% → 0.15% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityHIGH
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Connections
2 relationships
Timeline
disclosure → media coverage
Oct 20, 2026
Disclosure — published as a CVE record. · last revised by NVD Oct 28, 2026