agentprime: CWE-363

filelock: StrictSoftFileLock follows a symbolic link swapped in at .filelock and creates claim files in a directory another local user chooses

Wed, 28 Oct 2026 21:08:23 GMT

filelock >=3.30.0, <4.2.1, fixed in 4.2.1. CVSS 5.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory

Fri, 23 Oct 2026 22:00:11 GMT

filelock >=4.1.0, <4.2.1, fixed in 4.2.1. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files

Fri, 23 Oct 2026 21:59:08 GMT

filelock >=3.20.4, <4.2.1, fixed in 4.2.1. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-91203: Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition

Fri, 18 Sep 2026 19:21:06 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-91205: Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race

Fri, 18 Sep 2026 19:14:47 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-71125: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

Tue, 18 Aug 2026 21:03:38 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-13492: HP Image Assistant - Potential Escalation of Privilege

Wed, 03 Dec 2025 16:33:39 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects

Wed, 05 Nov 2025 18:45:18 GMT

youki <0.5.7, fixed in 0.5.7. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

youki container escape via "masked path" abuse due to mount race conditions

Wed, 05 Nov 2025 18:44:18 GMT

youki <0.5.7, fixed in 0.5.7. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

runc container escape and denial of service due to arbitrary write gadgets and procfs write redirects

Wed, 05 Nov 2025 18:40:40 GMT

github.com/opencontainers/runc <1.2.8 || >=1.3.0-rc.1, <1.3.3 || >=1.4.0-rc.1, <1.4.0-rc.3, fixed in 1.2.8, 1.3.3, 1.4.0-rc.3. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

runc container escape with malicious config due to /dev/console mount and related races

Wed, 05 Nov 2025 17:34:49 GMT

github.com/opencontainers/runc >=1.0.0-rc3, <1.2.8 || >=1.3.0-rc.1, <1.3.3 || >=1.4.0-rc.1, <1.4.0-rc.3, fixed in 1.2.8, 1.3.3, 1.4.0-rc.3. CVSS 8.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

runc container escape via "masked path" abuse due to mount race conditions

Wed, 05 Nov 2025 16:37:15 GMT

runc can be confused to create empty files/directories on the host

Tue, 03 Sep 2024 19:49:32 GMT

github.com/opencontainers/runc <1.1.14 || >=1.2.0-rc.1, <1.2.0-rc.3, fixed in 1.1.14, 1.2.0-rc.3. CVSS 3.6 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Pterodactyl Wings vulnerable to improper isolation of server file access

Fri, 15 Mar 2024 16:48:21 GMT

github.com/pterodactyl/wings <1.11.9, fixed in 1.11.9. CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-21658: Race condition in std::fs::remove_dir_all in rustlang

Thu, 20 Jan 2022 00:00:00 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2018-6693: Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability

Tue, 18 Sep 2018 22:00:00 GMT

CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.