# CWE-378.

Every Advisory and CVE whose sources give the weakness CWE-378, newest first.

## Records, newest first

- [Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path](https://agentprime.io/advisories/CVE-2026-97026.md)
  `CVE-2026-97026` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-378
- [Flatpak: flatpak: world-readable oci authentication token in system-helper cache path](https://agentprime.io/advisories/CVE-2026-97025.md)
  `CVE-2026-97025` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.2 Low · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-378
- [Creation of Temporary File with Insecure Permissions in Qualcomm Software Center](https://agentprime.io/advisories/CVE-2026-25265.md)
  `CVE-2026-25265` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.8 High · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-378
- [osquery: Unprivileged users can temporarily read file carve contents](https://agentprime.io/advisories/CVE-2026-46388.md)
  `CVE-2026-46388` · CVE record: osquery osquery · CVSS 4.4 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: CWE-279, CWE-378, CWE-379
- [MLFlow Creates a Temporary File With Insecure Permissions](https://agentprime.io/advisories/GHSA-f2m9-wcf4-cwwx.md)
  `GHSA-f2m9-wcf4-cwwx`, `BIT-mlflow-2026-4137`, `CVE-2026-4137`, `PYSEC-2026-2655` · PyPI `mlflow`: affected `>=1.26.0, <3.11.0`, fixed in `3.11.0` · CVSS 7.0 High · Not analysed yet · Published 18 May 2026 · Tags: CWE-378
- [Duplicate Advisory: OpenClaw session transcript files were created without forced user-only permissions](https://agentprime.io/advisories/GHSA-9q8j-chc7-wpgp.md)
  `GHSA-9q8j-chc7-wpgp` · npm `openclaw`: affected `<2026.2.17`, fixed in `2026.2.17` · CVSS 8.4 High · Withdrawn · Not analysed yet · Published 29 Mar 2026 · Tags: CWE-378
- [Enter Software Iperius Backup Backup Service temp file](https://agentprime.io/advisories/CVE-2026-4822.md)
  `CVE-2026-4822` · CVE record: Enter Software Iperius Backup · CVSS 7.3 High · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-377, CWE-378
- [OpenClaw session transcript files were created without forced user-only permissions](https://agentprime.io/advisories/GHSA-vr7j-g7jv-h5mp.md)
  `GHSA-vr7j-g7jv-h5mp`, `CVE-2026-33572` · npm `openclaw`: affected `<2026.2.17`, fixed in `2026.2.17` · CVSS 6.8 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Broken access control, CWE-378
- [Spring Data Geode Insecure Temporary Directory Usage](https://agentprime.io/advisories/CVE-2026-2817.md)
  `CVE-2026-2817` · CVE record: VMware Spring Data Geode and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Information disclosure, CWE-378, CWE-379
- [Dell SupportAssist OS Recovery: Dell SupportAssist OS Recovery, versions prior to 5.5.15.1…](https://agentprime.io/advisories/CVE-2025-46685.md)
  `CVE-2025-46685` · CVE record: Dell SupportAssist OS Recovery · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-378
- [Dell SupportAssist OS Recovery,: Dell SupportAssist OS Recovery, versions prior to 5.5.15.1…](https://agentprime.io/advisories/CVE-2025-46684.md)
  `CVE-2025-46684` · CVE record: Dell SupportAssist OS Recovery, · CVSS 6.6 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-378
- [JumpCloud Remote Assist < 0.317.0 Arbitrary File Write/Delete via Insecure Temp Directory](https://agentprime.io/advisories/CVE-2025-34352.md)
  `CVE-2025-34352` · CVE record: JumpCloud Inc. Remote Assist · CVSS 8.5 High · Not analysed yet · Published 2 Dec 2025 · Tags: Path traversal, CWE-378
- [llama-index-core insecurely handles temporary files](https://agentprime.io/advisories/GHSA-cr7q-2w66-hjcm.md)
  `GHSA-cr7q-2w66-hjcm`, `CVE-2025-7647`, `PYSEC-2026-1562` · PyPI `llama-index-core`: affected `<0.13.0`, fixed in `0.13.0` · CVSS 7.3 High · Not analysed yet · Published 27 Sept 2025 · Tags: CWE-378
- [Podman Creates Temporary File with Insecure Permissions](https://agentprime.io/advisories/GHSA-m68q-4hqr-mc6f.md)
  `GHSA-m68q-4hqr-mc6f`, `CVE-2025-4953`, `GO-2025-3961` · Go `github.com/containers/podman/v5`: affected `<=5.5.0`, no fixed version yet · CVSS 7.4 High · Not analysed yet · Published 16 Sept 2025 · Tags: CWE-378
- [Mihomo Party Socket sysproxy.ts enableSysProxy temp file](https://agentprime.io/advisories/CVE-2025-9474.md)
  `CVE-2025-9474` · CVE record: Mihomo Party · CVSS 2.0 Low · Not analysed yet · Published 26 Aug 2025 · Tags: CWE-377, CWE-378
- [Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allow attackers to arbitrarily change other users' passwords via manipulation of th…](https://agentprime.io/advisories/CVE-2025-55629.md)
  `CVE-2025-55629` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 22 Aug 2025 · Tags: CWE-378
- [Dell SupportAssist OS Recovery: Dell SupportAssist OS Recovery, versions prior to 5.5.14.0…](https://agentprime.io/advisories/CVE-2025-38747.md)
  `CVE-2025-38747` · CVE record: Dell SupportAssist OS Recovery · CVSS 7.8 High · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-378
- [NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.](https://agentprime.io/advisories/CVE-2025-32979.md)
  `CVE-2025-32979` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 25 Apr 2025 · Tags: CWE-378
- [Local privilege escalation in make-initrd-ng](https://agentprime.io/advisories/CVE-2025-32438.md)
  `CVE-2025-32438` · CVE record: NixOS nixpkgs · CVSS 8.8 High · Not analysed yet · Published 15 Apr 2025 · Tags: CWE-378, CWE-379
- [Gradle vulnerable to local privilege escalation through system temporary directory](https://agentprime.io/advisories/CVE-2025-27148.md)
  `CVE-2025-27148` · CVE record: gradle gradle · CVSS 8.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: CWE-378, CWE-379
- [Insecure Temporary File in RESTEasy](https://agentprime.io/advisories/GHSA-2c6g-pfx3-w7h8.md)
  `GHSA-2c6g-pfx3-w7h8`, `CVE-2023-0482` · Maven `org.jboss.resteasy:resteasy-core` and 1 more: affected `>=6.0.0.Beta1, <6.2.3.Final || >=5.0.0.Alpha1, <5.0.6.Final || >=4.0.0.Beta1, <4.7.8.Final || <3.15.5.Final`, fixed in `6.2.3.Final`, `5.0.6.Final`, `4.7.8.Final`, `3.15.5.Final` · CVSS 5.5 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: CWE-378
- [Dell NativeEdge: Dell NativeEdge, version(s) 2.1.0.0, contain(s) a Creation of Temporary File With…](https://agentprime.io/advisories/CVE-2024-52543.md)
  `CVE-2024-52543` · CVE record: Dell NativeEdge · CVSS 6.5 Medium · Not analysed yet · Published 25 Dec 2024 · Tags: CWE-378
- [Insecure Temporary File in \`foxmarks\`](https://agentprime.io/advisories/CVE-2024-47884.md)
  `CVE-2024-47884` · CVE record: zefr0x foxmarks · CVSS 2.4 Low · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-378
- [Apache Hadoop: Temporary File Local Information Disclosure](https://agentprime.io/advisories/GHSA-f5fw-25gw-5m92.md)
  `GHSA-f5fw-25gw-5m92`, `CVE-2024-23454` · Maven `org.apache.hadoop:hadoop-common`: affected `<3.4.0`, fixed in `3.4.0` · CVSS 3.3 Low · Not analysed yet · Published 25 Sept 2024 · Tags: Privilege escalation, CWE-378
- [Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp file](https://agentprime.io/advisories/CVE-2024-7358.md)
  `CVE-2024-7358` · CVE record: Point B Ltd Getscreen Agent · CVSS 8.5 High · Not analysed yet · Published 1 Aug 2024 · Tags: CWE-377, CWE-378
- [The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions during installation.](https://agentprime.io/advisories/CVE-2024-42052.md)
  `CVE-2024-42052` · CVE record · CVSS 7.8 High · Not analysed yet · Published 28 Jul 2024 · Tags: CWE-378
- [A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).](https://agentprime.io/advisories/CVE-2024-39872.md)
  `CVE-2024-39872` · CVE record: Siemens SINEMA Remote Connect Server · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-378
- [JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions.](https://agentprime.io/advisories/CVE-2023-26603.md)
  `CVE-2023-26603` · CVE record · CVSS 5.9 Medium · Not analysed yet · Published 26 Apr 2024 · Tags: CWE-378
- [Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability.](https://agentprime.io/advisories/CVE-2023-28600.md)
  `CVE-2023-28600` · CVE record: Zoom Video Communications, Inc. Zoom for macOS Client · CVSS 5.2 Medium · Not analysed yet · Published 13 Jun 2023 · Tags: CWE-378
- [A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1).](https://agentprime.io/advisories/CVE-2023-27408.md)
  `CVE-2023-27408` · CVE record: Siemens SCALANCE LPE9403 · CVSS 3.3 Low · Not analysed yet · Published 9 May 2023 · Tags: CWE-378
- [RestEasy Reactive implementation of Quarkus allows Creation of Temporary File With Insecure Permissions](https://agentprime.io/advisories/GHSA-j75r-vf64-6rrh.md)
  `GHSA-j75r-vf64-6rrh`, `CVE-2023-0481` · Maven `io.quarkus.resteasy.reactive:resteasy-reactive-common`: affected `<3.0.0.Alpha4`, fixed in `3.0.0.Alpha4` · CVSS 3.3 Low · Not analysed yet · Published 24 Feb 2023 · Tags: Information disclosure, CWE-378
- [Duplicate Advisory: Insecure Temporary File in RESTEasy](https://agentprime.io/advisories/GHSA-jrmh-v64j-mjm9.md)
  `GHSA-jrmh-v64j-mjm9` · Maven `org.jboss.resteasy:resteasy-core` and 1 more: affected `<4.7.8.Final || >=5.0.0.Alpha1, <5.0.6.Final || >=6.0.0.Beta1, <6.2.3.Final`, fixed in `4.7.8.Final`, `5.0.6.Final`, `6.2.3.Final` · CVSS 5.5 Medium · Withdrawn · Not analysed yet · Published 18 Feb 2023 · Tags: CWE-378
- [Creation of Temporary File With Insecure Permissions in logilab-commons](https://agentprime.io/advisories/GHSA-g5m2-22h2-rr3j.md)
  `GHSA-g5m2-22h2-rr3j`, `CVE-2014-1839`, `PYSEC-2014-84` · PyPI `logilab-common`: affected `<0.61.0`, fixed in `0.61.0` · CVSS 5.6 Medium · Not analysed yet · Published 14 May 2022 · Tags: CWE-378
- [Local Information Disclosure Vulnerability in io.netty:netty-codec-http](https://agentprime.io/advisories/GHSA-269q-hmxg-m83q.md)
  `GHSA-269q-hmxg-m83q`, `CVE-2022-24823` · Maven `io.netty:netty-codec-http`: affected `<4.1.77.Final`, fixed in `4.1.77.Final` · CVSS 5.5 Medium · Not analysed yet · Published 10 May 2022 · Tags: Information disclosure, CWE-378, CWE-379
- [Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability.](https://agentprime.io/advisories/CVE-2022-24411.md)
  `CVE-2022-24411` · CVE record: Dell PowerScale OneFS · CVSS 7.8 High · Not analysed yet · Published 12 Apr 2022 · Tags: CWE-378
- [Avaya Aura Device Services Arbitrary Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-25654.md)
  `CVE-2021-25654` · CVE record: Avaya Avaya Aura Devices Services · CVSS 6.2 Medium · Not analysed yet · Published 25 Jun 2021 · Tags: CWE-378
- [Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code](https://agentprime.io/advisories/GHSA-cqxr-xf2w-943w.md)
  `GHSA-cqxr-xf2w-943w`, `CVE-2021-21430` · Maven `org.openapitools:openapi-generator`: affected `<5.1.0`, fixed in `5.1.0` · CVSS 6.2 Medium · Not analysed yet · Published 11 May 2021 · Tags: Privilege escalation, Information disclosure, CWE-377, CWE-378
- [Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator](https://agentprime.io/advisories/GHSA-23x4-m842-fmwf.md)
  `GHSA-23x4-m842-fmwf`, `CVE-2021-21428` · Maven `org.openapitools:openapi-generator-online`: affected `<5.1.0`, fixed in `5.1.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 May 2021 · Tags: Privilege escalation, Information disclosure, CWE-377, CWE-378
- [Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1426.md)
  `CVE-2021-1426` · CVE record: Cisco Cisco AnyConnect Secure Mobility Client · CVSS 7.0 High · Not analysed yet · Published 6 May 2021 · Tags: CWE-378
- [Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1427.md)
  `CVE-2021-1427` · CVE record: Cisco Cisco AnyConnect Secure Mobility Client · CVSS 7.0 High · Not analysed yet · Published 6 May 2021 · Tags: CWE-378
- [Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1496.md)
  `CVE-2021-1496` · CVE record: Cisco Cisco AnyConnect Secure Mobility Client · CVSS 7.0 High · Not analysed yet · Published 6 May 2021 · Tags: CWE-378
- [Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1429.md)
  `CVE-2021-1429` · CVE record: Cisco Cisco AnyConnect Secure Mobility Client · CVSS 7.0 High · Not analysed yet · Published 6 May 2021 · Tags: CWE-378
- [Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1430.md)
  `CVE-2021-1430` · CVE record: Cisco Cisco AnyConnect Secure Mobility Client · CVSS 7.0 High · Not analysed yet · Published 6 May 2021 · Tags: CWE-378
- [Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1428.md)
  `CVE-2021-1428` · CVE record: Cisco Cisco AnyConnect Secure Mobility Client · CVSS 7.0 High · Not analysed yet · Published 6 May 2021 · Tags: CWE-378
- [Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin](https://agentprime.io/advisories/GHSA-867q-77cc-98mv.md)
  `GHSA-867q-77cc-98mv`, `CVE-2021-21429` · Maven `org.openapitools:openapi-generator-maven-plugin`: affected `<5.1.0`, fixed in `5.1.0` · CVSS 4.0 Medium · Not analysed yet · Published 29 Apr 2021 · Tags: Information disclosure, CWE-377, CWE-378, CWE-379
- [Local information disclosure via system temporary directory](https://agentprime.io/advisories/GHSA-c43q-5hpj-4crv.md)
  `GHSA-c43q-5hpj-4crv`, `CVE-2021-28168` · Maven `org.glassfish.jersey.core:jersey-common`: affected `>=2.28, <2.34 || >=3.0.0, <3.0.2`, fixed in `2.34`, `3.0.2` · CVSS 6.2 Medium · Not analysed yet · Published 23 Apr 2021 · Tags: Information disclosure, Broken access control, CWE-378, CWE-379
- [hawk: Insecure file permissions](https://agentprime.io/advisories/CVE-2021-25314.md)
  `CVE-2021-25314` · CVE record: SUSE SUSE Linux Enterprise High Availability 12-SP3 and 2 more · CVSS 7.8 High · Not analysed yet · Published 14 Apr 2021 · Tags: CWE-378
- [Local privilege escalation through system temporary directory](https://agentprime.io/advisories/CVE-2021-29428.md)
  `CVE-2021-29428` · CVE record: gradle gradle · CVSS 8.8 High · Not analysed yet · Published 13 Apr 2021 · Tags: CWE-378, CWE-379
- [Information Disclosure in Guava](https://agentprime.io/advisories/GHSA-5mg8-w23w-74h3.md)
  `GHSA-5mg8-w23w-74h3`, `CVE-2020-8908`, `SNYK-JAVA-COMGOOGLEGUAVA-1015415` · Maven `com.google.guava:guava`: affected `<32.0.0-android`, fixed in `32.0.0-android` · CVSS 3.3 Low · Not analysed yet · Published 25 Mar 2021 · Tags: Information disclosure, Broken access control, CWE-173, CWE-378
- [Generated Code Contains Local Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-hpv8-9rq5-hq7w.md)
  `GHSA-hpv8-9rq5-hq7w`, `CVE-2021-21364` · Maven `io.swagger:swagger-codegen`: affected `<2.4.19`, fixed in `2.4.19` · CVSS 5.3 Medium · Not analysed yet · Published 11 Mar 2021 · Tags: Information disclosure, Broken access control, CWE-378
- [Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory](https://agentprime.io/advisories/GHSA-pc22-3g76-gm6j.md)
  `GHSA-pc22-3g76-gm6j`, `CVE-2021-21363` · Maven `io.swagger:swagger-codegen`: affected `<2.4.19`, fixed in `2.4.19` · CVSS 5.3 Medium · Not analysed yet · Published 11 Mar 2021 · Tags: CWE-378, CWE-379
- [Local Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-2cxf-6567-7pp6.md)
  `GHSA-2cxf-6567-7pp6`, `CVE-2021-21331` · Maven `com.datadoghq:datadog-api-client`: affected `>=1.0.0-beta.6, <1.0.0-beta.9`, fixed in `1.0.0-beta.9` · CVSS 3.0 Low · Not analysed yet · Published 3 Mar 2021 · Tags: CWE-378, CWE-379
- [Local Information Disclosure Vulnerability in Netty on Unix-Like systems](https://agentprime.io/advisories/GHSA-5mcr-gq6c-3hq2.md)
  `GHSA-5mcr-gq6c-3hq2`, `CVE-2021-21290` · Maven `io.netty:netty` and 2 more: affected `*`, no fixed version yet · CVSS 6.2 Medium · Not analysed yet · Published 8 Feb 2021 · Tags: Information disclosure, CWE-378, CWE-379
- [Local Temp Directory Hijacking Vulnerability](https://agentprime.io/advisories/GHSA-g3wg-6mcf-8jj6.md)
  `GHSA-g3wg-6mcf-8jj6`, `CVE-2020-27216` · Maven `org.eclipse.jetty:jetty-webapp` and 1 more: affected `<9.4.33.v20201020 || >=10.0.0.beta1, <10.0.0.beta3 || >=11.0.0.beta1, <11.0.0.beta3`, fixed in `9.4.33.v20201020`, `10.0.0.beta3`, `11.0.0.beta3` · CVSS 7.0 High · Not analysed yet · Published 4 Nov 2020 · Tags: Information disclosure, CWE-378, CWE-379
- [On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint because it fails t…](https://agentprime.io/advisories/CVE-2016-9485.md)
  `CVE-2016-9485` · CVE record: Microsoft Windows SecureConnector agent · No CVSS score · Not analysed yet · Published 13 Jul 2018 · Tags: CWE-378

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-378>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-378/>. Everything for agents: <https://agentprime.io/llms.txt>.