CWE-377.

Powerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus Installer

• romkatv powerlevel10k
• romkatv gitstatus
• CWE-377

nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins

• jarun nnn
• CWE-377

Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build

• elixir
• CWE-377

Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root

• WatchGuard Fireware OS
• Path traversal
• CWE-377

virtualenv: Temporary app-data can leave dangling seed package links

• CWE-377

>=21.14.8, <21.14.10 · fixed in 21.14.10

Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities

• Cisco TelePresence Video Communication Server (VCS) Expressway
• CWE-377

Terragrunt catalog predictable temp symlink clobber

• Path traversal
• CWE-377

<1.1.1 · fixed in 1.1.1

CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)

• OpenPrinting cups
• Path traversal
• CWE-377

Metalama allows local code execution through DLL planting in shared temporary directories

• CWE-377
• CWE-427

<2025.1.18 || >=2026.0.0-preview, <2026.0.25 || >=2026.1.0-preview, <2026.1.19 · fixed in 2025.1.18, 2026.0.25, 2026.1.19

Insecure Temporary File Vulnerability in Hitachi Disk Array Driver for AIX, Hitachi Disk Array Driver for Virtual I/O Server

• Hitachi Disk Array Driver for AIX
• Hitachi Disk Array Driver for Virtual I/O Server
• CWE-377

Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture

• elio
• CWE-377

Code for IBM i: Temporary files are visible to all users

• codefori vscode-ibmi
• CWE-377
• CWE-459

yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

• Race condition
• CWE-377

<1.11.4 · fixed in 1.11.4

Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability

• Fortra BoKS Manager
• CWE-377

mport trusts environment-controlled temporary directories in privileged metadata extraction

• MidnightBSD mport
• Path traversal
• CWE-377

Insecure temporary file in Dell PowerScale OneFS

• Dell PowerScale OneFS
• CWE-377

Predictable cache directory location allows local ONNX model substitution in Spring AI

• Spring AI
• CWE-377

Faktory: Insecure predictable /tmp/redis.conf enables local Redis config hijack (network exposure / root RCE primitive)

• contribsys faktory
• CWE-377

Weak File Name Generation in vsDesk

• vsDesk
• CWE-340
• CWE-377

phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIP

• thorsten phpMyFAQ
• CWE-377

ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

• Path traversal
• CWE-377

<3.1.0 · fixed in 3.1.0

Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-377

Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-377

Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI

• Lenovo XClarity Essentials OneCLI
• CWE-377

Authenticated Path Traversal allows Unauthorized Access in Web Interface

• Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateway (ECOS)
• Broken access control
• CWE-377

Flameshot: OCTOU symlink attack via predictable /tmp path in Flameshot "Open With"

• flameshot
• Race condition
• CWE-377

Linuxfabrik Monitoring Plugins allow insecure creation of SQLite databases

• CWE-377

<4.2.0 · fixed in 4.2.0

mktemp: empty TMPDIR creates temp files in CWD instead of /tmp

• CWE-377

<0.6.0 · fixed in 0.6.0

Predictable Temporary File in GNU gzip

• GNU gzip
• CWE-377

@anthropic-ai/claude-code has an Insecure Temporary File in /copy Command that Enables Response Disclosure and Symlink-Based File Write

• Path traversal
• Information disclosure

>=2.1.59, <2.1.128 · fixed in 2.1.128

Spring Boot: Predictable Temp Directory in Artemis Auto-configuration

• CWE-377

>=4.0.0, <4.0.7 || >=3.5.0, <3.5.15 || >=3.4.0, <=3.4.16 || >=3.3.0, <=3.3.19 || >=2.7.0, <=2.7.33 · fixed in 4.0.7, 3.5.15

bit7z: Arbitrary File Overwrite via Symlink Attack on Predictable Temp File During Archive Update

• rikyoz bit7z
• Path traversal
• CWE-377

CodexBar < 0.32.0 Insecure Temporary File Handling in Notarization Workflow

• steipete CodexBar
• Path traversal
• CWE-377

CodexBar < 0.32.0 Privilege Escalation via CLI Installer Temp File

• steipete CodexBar
• CWE-377

Spring AI's ONNX model cache defaults to world-writable predictable /tmp directory

• CWE-377

>=1.0.0, <1.0.6 || >=1.1.0, <1.1.5 · fixed in 1.0.6, 1.1.5

Spring Boot accepts predictable temp directory without ownership verification

• CWE-377

>=4.0.0, <4.0.6 || >=3.5.0, <3.5.14 || >=3.4.0, <=3.4.15 || >=3.3.0, <=3.3.18 || <=2.7.32 · fixed in 4.0.6, 3.5.14

The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12 stores daily activity logs with predictable names in a publicly accessible directory, which allows unauthen…

• Information disclosure
• CWE-377

Duplicate Advisory: uutils coreutils' mktemp utility doesn't properly handle an empty TMPDIR environment variable

• CWE-377

<0.6.0 · fixed in 0.6.0

Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-377

poetry-plugin-tweak-dependencies-version affected by CVE-2026-25645

• CWE-377

<1.5.6 · fixed in 1.5.6

Enter Software Iperius Backup Backup Service temp file

• Enter Software Iperius Backup
• CWE-377
• CWE-378

Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

• CWE-377

<2.33.0 · fixed in 2.33.0

Insecure temporary file in Apple macOS

• Apple macOS
• CWE-377

Capgo CLI: symlink-following local secret writes enable arbitrary file overwrite + world-readable credentials (0600 missing)

• Path traversal
• Broken access control

<7.84.6 · fixed in 7.84.6

Insecure temporary file in openSUSE sdbootutil

• openSUSE sdbootutil
• CWE-377

Insecure temporary file in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple macOS
• CWE-377

Insecure temporary file in Apple macOS

• Apple macOS
• CWE-377

Quartus® Prime Standard and Quartus® Prime Lite Security Advisory

• Altera Quartus Prime Standard
• Altera Quartus Prime Lite
• CWE-377

Quartus Prime Pro Edition Advisory

• Altera Quartus Prime Pro
• CWE-377

Robocode has an insecure temporary file creation vulnerability in the AutoExtract component

• CWE-377

<1.9.5.6 · fixed in 1.9.5.6

Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality

• Information disclosure
• CWE-377

>=10.0.0, <13.12.1 · fixed in 13.12.1

Insecure temporary file in Dell Alienware Command Center 6.x (AWCC)

• Dell Alienware Command Center 6.x (AWCC)
• CWE-377

Insecure temporary file in Dell Alienware Command Center 6.x (AWCC)

• Dell Alienware Command Center 6.x (AWCC)
• CWE-377

llama-index has Insecure Temporary File

• CWE-377

<0.13.0 · fixed in 0.13.0

Insecure temporary file in magicmonty bash-git-prompt

• magicmonty bash-git-prompt
• CWE-377

Vasion Print (formerly PrinterLogic) Local Privilege Escalation via Insecure Temporary File Handling

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• Path traversal
• CWE-377

Mihomo Party Socket sysproxy.ts enableSysProxy temp file

• Mihomo Party
• CWE-377
• CWE-378

Insecure temporary file in pycode-browser

• pycode-browser
• CWE-377

Insecure Temporary File usage in github.com/golang/glog

• CWE-61
• CWE-377

<1.2.4 · fixed in 1.2.4

Fixed temporary file path in aeon-checks allows fixing of disk encryption key

• openSUSE Tumbleweed
• CWE-377