- What: The Filelock package has two vulnerabilities: incorrect handling of symlinks in temp files and a race condition in the file locking implementation.
- Why: These issues could allow a local attacker to cause lock operations to fail, behave unexpectedly, cause a denial of service, or corrupt arbitrary user files.
- Impact: Systems using the Filelock package are potentially vulnerable to local exploitation.
It was discovered that Filelock incorrectly handled symlinks in temp files. A local attacker could possibly use this issue to cause lock operations to fail or behave unexpectedly. (CVE-2026-22701) It was discovered that the file locking implementation in the Filelock package contained a race condition. A local attacker could possibly use this to cause a denial of service or corrupt arbitrary user files. (CVE-2025-68146)