agentprime: CWE-377

CVE-2026-122137: Powerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus Installer

Wed, 04 Nov 2026 20:36:55 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121549: nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins

Tue, 03 Nov 2026 15:17:08 GMT

CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-97209: Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build

Fri, 30 Oct 2026 08:59:17 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-93864: Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root

Tue, 27 Oct 2026 15:52:27 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

virtualenv: Temporary app-data can leave dangling seed package links

Fri, 23 Oct 2026 22:26:57 GMT

virtualenv >=21.14.8, <21.14.10, fixed in 21.14.10. CVSS 4.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-76497: Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities

Wed, 21 Oct 2026 16:18:13 GMT

CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Terragrunt catalog predictable temp symlink clobber

Thu, 15 Oct 2026 18:21:35 GMT

github.com/gruntwork-io/terragrunt <1.1.1, fixed in 1.1.1. CVSS 4.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-55480: CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)

Thu, 15 Oct 2026 17:09:33 GMT

CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Metalama allows local code execution through DLL planting in shared temporary directories

Wed, 14 Oct 2026 19:24:53 GMT

Metalama.Framework <2025.1.18 || >=2026.0.0-preview, <2026.0.25 || >=2026.1.0-preview, <2026.1.19, fixed in 2025.1.18, 2026.0.25, 2026.1.19. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-82715: Insecure Temporary File Vulnerability in Hitachi Disk Array Driver for AIX, Hitachi Disk Array Driver for Virtual I/O Server

Wed, 14 Oct 2026 01:46:59 GMT

CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110234: Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture

Tue, 13 Oct 2026 18:50:16 GMT

CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-49484: Code for IBM i: Temporary files are visible to all users

Mon, 12 Oct 2026 21:37:50 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

Wed, 07 Oct 2026 20:35:51 GMT

at.yawk.lz4:lz4-java <1.11.4, fixed in 1.11.4. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-79899: Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability

Thu, 01 Oct 2026 14:37:23 GMT

CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54584: mport trusts environment-controlled temporary directories in privileged metadata extraction

Mon, 21 Sep 2026 14:05:48 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-40635: Insecure temporary file in Dell PowerScale OneFS

Wed, 09 Sep 2026 16:24:12 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-47852: Predictable cache directory location allows local ONNX model substitution in Spring AI

Wed, 26 Aug 2026 23:28:42 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63404: Faktory: Insecure predictable /tmp/redis.conf enables local Redis config hijack (network exposure / root RCE primitive)

Tue, 25 Aug 2026 22:01:19 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-14602: Weak File Name Generation in vsDesk

Thu, 20 Aug 2026 06:39:04 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75920: phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIP

Wed, 19 Aug 2026 14:01:53 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

Thu, 13 Aug 2026 14:11:07 GMT

ep_etherpad-lite <3.1.0, fixed in 3.1.0. CVSS 4.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-73584: Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling

Thu, 13 Aug 2026 12:44:16 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73585: Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack

Thu, 13 Aug 2026 12:44:09 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-16791: Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI

Tue, 04 Aug 2026 19:47:55 GMT

CVSS 1.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-44878: Authenticated Path Traversal allows Unauthorized Access in Web Interface

Tue, 21 Jul 2026 20:42:17 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-62294: Flameshot: OCTOU symlink attack via predictable /tmp path in Flameshot "Open With"

Wed, 15 Jul 2026 14:20:43 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Linuxfabrik Monitoring Plugins allow insecure creation of SQLite databases

Mon, 06 Jul 2026 20:31:43 GMT

linuxfabrik-lib <4.2.0, fixed in 4.2.0. CVSS 2.0 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

mktemp: empty TMPDIR creates temp files in CWD instead of /tmp

Mon, 06 Jul 2026 19:50:41 GMT

uu_mktemp <0.6.0, fixed in 0.6.0. CVSS 3.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-41991: Predictable Temporary File in GNU gzip

Mon, 29 Jun 2026 10:15:50 GMT

CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

@anthropic-ai/claude-code has an Insecure Temporary File in /copy Command that Enables Response Disclosure and Symlink-Based File Write

Thu, 25 Jun 2026 16:53:00 GMT

@anthropic-ai/claude-code >=2.1.59, <2.1.128, fixed in 2.1.128. CVSS 4.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Spring Boot: Predictable Temp Directory in Artemis Auto-configuration

Thu, 11 Jun 2026 09:31:56 GMT

org.springframework.boot:spring-boot-autoconfigure >=4.0.0, <4.0.7 || >=3.5.0, <3.5.15 || >=3.4.0, <=3.4.16 || >=3.3.0, <=3.3.19 || >=2.7.0, <=2.7.33, fixed in 4.0.7, 3.5.15. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-45384: bit7z: Arbitrary File Overwrite via Symlink Attack on Predictable Temp File During Archive Update

Wed, 10 Jun 2026 20:00:19 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-49135: CodexBar < 0.32.0 Insecure Temporary File Handling in Notarization Workflow

Mon, 01 Jun 2026 18:57:30 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-49134: CodexBar < 0.32.0 Privilege Escalation via CLI Installer Temp File

Mon, 01 Jun 2026 18:53:18 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Spring AI's ONNX model cache defaults to world-writable predictable /tmp directory

Tue, 28 Apr 2026 09:34:13 GMT

org.springframework.ai:spring-ai-transformers >=1.0.0, <1.0.6 || >=1.1.0, <1.1.5, fixed in 1.0.6, 1.1.5. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Spring Boot accepts predictable temp directory without ownership verification

Tue, 28 Apr 2026 00:31:41 GMT

org.springframework.boot:spring-boot >=4.0.0, <4.0.6 || >=3.5.0, <3.5.14 || >=3.4.0, <=3.4.15 || >=3.3.0, <=3.3.18 || <=2.7.32, fixed in 4.0.6, 3.5.14. CVSS 7.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-67223: The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12 stores daily activity logs with predictable names in a publicly accessible directory, which allows unauthen…

Tue, 28 Apr 2026 00:00:00 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: uutils coreutils' mktemp utility doesn't properly handle an empty TMPDIR environment variable

Wed, 22 Apr 2026 18:31:44 GMT

coreutils <0.6.0, fixed in 0.6.0. CVSS 3.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-20204: Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise

Wed, 15 Apr 2026 15:17:54 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

poetry-plugin-tweak-dependencies-version affected by CVE-2026-25645

Wed, 01 Apr 2026 20:52:20 GMT

poetry-plugin-tweak-dependencies-version <1.5.6, fixed in 1.5.6. CVSS 4.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-4822: Enter Software Iperius Backup Backup Service temp file

Wed, 25 Mar 2026 20:31:47 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

Wed, 25 Mar 2026 16:56:28 GMT

requests <2.33.0, fixed in 2.33.0. CVSS 4.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-20651: Insecure temporary file in Apple macOS

Wed, 25 Mar 2026 00:31:31 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Capgo CLI: symlink-following local secret writes enable arbitrary file overwrite + world-readable credentials (0600 missing)

Wed, 18 Mar 2026 16:09:42 GMT

@capgo/cli <7.84.6, fixed in 7.84.6. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-25701: Insecure temporary file in openSUSE sdbootutil

Wed, 25 Feb 2026 10:59:58 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20649: Insecure temporary file in Apple iOS and iPadOS and others

Wed, 11 Feb 2026 22:58:58 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20618: Insecure temporary file in Apple macOS

Wed, 11 Feb 2026 22:58:33 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-14614: Quartus® Prime Standard and Quartus® Prime Lite Security Advisory

Tue, 06 Jan 2026 21:38:05 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-14612: Quartus Prime Pro Edition Advisory

Tue, 06 Jan 2026 21:24:33 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Robocode has an insecure temporary file creation vulnerability in the AutoExtract component

Tue, 09 Dec 2025 18:30:35 GMT

net.sf.robocode:robocode.battle <1.9.5.6, fixed in 1.9.5.6. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.