# CWE-379.

Every Advisory and CVE whose sources give the weakness CWE-379, newest first.

## Records, newest first

- [pytorch/serve: Local privilege escalation through insecure temporary path](https://agentprime.io/advisories/CVE-2026-123974.md)
  `CVE-2026-123974` · CVE record: PyTorch TorchServe · CVSS 7.8 High · Not analysed yet · Published 6 Nov 2026 · Tags: CWE-379
- [PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling](https://agentprime.io/advisories/GHSA-9vw2-f4vp-x7gf.md)
  `GHSA-9vw2-f4vp-x7gf`, `CVE-2026-119193`, `PKSA-qhjm-rpqc-qkn6` · Packagist `phpunit/phpunit`: affected `>=13.4.0, <13.4.4`, fixed in `13.4.4` · CVSS 5.4 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-379
- [CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup](https://agentprime.io/advisories/CVE-2026-118990.md)
  `CVE-2026-118990` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Path traversal, CWE-379
- [CVE-2026-118131](https://agentprime.io/advisories/CVE-2026-118131.md)
  `CVE-2026-118131` · CVE record: GnuPG GnuPG · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Broken access control, CWE-379, CWE-427
- [AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink](https://agentprime.io/advisories/CVE-2026-102740.md)
  `CVE-2026-102740` · CVE record: AsyncHttpClient async-http-client · CVSS 5.8 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control, CWE-61, CWE-379
- [Incorrect default permissions in Eclipse Foundation Eclipse Ankaios](https://agentprime.io/advisories/CVE-2026-86836.md)
  `CVE-2026-86836` · CVE record: Eclipse Foundation Eclipse Ankaios · CVSS 8.4 High · Not analysed yet · Published 14 Sept 2026 · Tags: Broken access control, Race condition, CWE-379
- [Windows Error Reporting Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-69482.md)
  `CVE-2026-69482` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-379
- [Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit](https://agentprime.io/advisories/CVE-2026-85028.md)
  `CVE-2026-85028` · CVE record: AWS aws-fpga · CVSS 7.3 High · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-379
- [HP ImageDiags - Potential Escalation of Privilege](https://agentprime.io/advisories/CVE-2026-82346.md)
  `CVE-2026-82346` · CVE record: HP Inc HP ImageDiags · CVSS 7.0 High · Not analysed yet · Published 31 Aug 2026 · Tags: CWE-379
- [Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability.](https://agentprime.io/advisories/CVE-2026-63693.md)
  `CVE-2026-63693` · CVE record: Dell Alienware Area 51m R2 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: CWE-379
- [HP Easy Start for macOS - Security Update](https://agentprime.io/advisories/CVE-2026-12555.md)
  `CVE-2026-12555` · CVE record: HP Inc HP Easy Start for macOS · CVSS 7.7 High · Not analysed yet · Published 24 Aug 2026 · Tags: CWE-379
- [NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions](https://agentprime.io/advisories/CVE-2026-50544.md)
  `CVE-2026-50544` · CVE record: NortheBridge luminalshine · CVSS 6.3 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Broken access control, CWE-379
- [Local Privilege Escalation in servereye client (sensorhub)](https://agentprime.io/advisories/CVE-2026-14551.md)
  `CVE-2026-14551` · CVE record: servereye GmbH servereye Windows Agent (Sensorhub) · CVSS 8.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: Path traversal, Privilege escalation, CWE-379
- [osquery: Unprivileged users can temporarily read file carve contents](https://agentprime.io/advisories/CVE-2026-46388.md)
  `CVE-2026-46388` · CVE record: osquery osquery · CVSS 4.4 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: CWE-279, CWE-378, CWE-379
- [HP Dock Accessory WMI Provider Installer Security Update](https://agentprime.io/advisories/CVE-2026-7539.md)
  `CVE-2026-7539` · CVE record: HP Inc. HP Dock Accessory · CVSS 7.3 High · Not analysed yet · Published 24 Jun 2026 · Tags: CWE-379
- [Pi Agent: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts](https://agentprime.io/advisories/GHSA-jfgx-wxx8-mp94.md)
  `GHSA-jfgx-wxx8-mp94`, `CVE-2026-54328` · npm `@earendil-works/pi-coding-agent` and 1 more: affected `>=0.74.0, <0.78.1`, fixed in `0.78.1` · CVSS 7.3 High · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-379
- [OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter](https://agentprime.io/advisories/GHSA-4625-4j76-fww9.md)
  `GHSA-4625-4j76-fww9`, `CVE-2026-42191` · NuGet `OpenTelemetry.Exporter.OpenTelemetryProtocol`: affected `>=1.8.0, <1.15.3`, fixed in `1.15.3` · CVSS 6.5 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-379
- [WinRAR 5.61 Denial of Service via Malformed Language File](https://agentprime.io/advisories/CVE-2019-25677.md)
  `CVE-2019-25677` · CVE record: Win-Rar WinRAR · CVSS 6.9 Medium · Not analysed yet · Published 5 Apr 2026 · Tags: CWE-379
- [Spring Data Geode Insecure Temporary Directory Usage](https://agentprime.io/advisories/CVE-2026-2817.md)
  `CVE-2026-2817` · CVE record: VMware Spring Data Geode and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Information disclosure, CWE-378, CWE-379
- [mlflow Creates of Temporary File in Directory with Insecure Permissions](https://agentprime.io/advisories/GHSA-4x5p-f36r-mxxr.md)
  `GHSA-4x5p-f36r-mxxr`, `BIT-mlflow-2025-10279`, `CVE-2025-10279`, `PYSEC-2026-1639` · PyPI `mlflow`: affected `<3.4.0rc0`, fixed in `3.4.0rc0` · CVSS 7.0 High · Not analysed yet · Published 2 Feb 2026 · Tags: CWE-379
- [pytest has vulnerable tmpdir handling](https://agentprime.io/advisories/GHSA-6w46-j5rx-g56g.md)
  `GHSA-6w46-j5rx-g56g`, `CVE-2025-71176`, `PYSEC-2026-1845` · PyPI `pytest`: affected `<9.0.3`, fixed in `9.0.3` · CVSS 6.8 Medium · Not analysed yet · Published 22 Jan 2026 · Tags: CWE-379
- [Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)](https://agentprime.io/advisories/CVE-2025-64896.md)
  `CVE-2025-64896` · CVE record: Adobe Creative Cloud Desktop · CVSS 5.5 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-379
- [IBM Controller Information Disclosure](https://agentprime.io/advisories/CVE-2025-33111.md)
  `CVE-2025-33111` · CVE record: IBM Controller and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-379
- [Revenera InstallShield: A potential elevated privilege issue has been reported with InstallShield built…](https://agentprime.io/advisories/CVE-2024-7562.md)
  `CVE-2024-7562` · CVE record: Revenera InstallShield · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2025 · Tags: CWE-379
- [Insecure handling of file paths allows multiple local attacks](https://agentprime.io/advisories/CVE-2025-32802.md)
  `CVE-2025-32802` · CVE record: ISC Kea · CVSS 6.1 Medium · Not analysed yet · Published 28 May 2025 · Tags: Path traversal, CWE-379
- [Local privilege escalation in make-initrd-ng](https://agentprime.io/advisories/CVE-2025-32438.md)
  `CVE-2025-32438` · CVE record: NixOS nixpkgs · CVSS 8.8 High · Not analysed yet · Published 15 Apr 2025 · Tags: CWE-378, CWE-379
- [LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions](https://agentprime.io/advisories/GHSA-jmgm-gx32-vp4w.md)
  `GHSA-jmgm-gx32-vp4w`, `CVE-2024-12911`, `PYSEC-2026-1555` · PyPI `llama-index`: affected `<0.12.3`, fixed in `0.12.3` · CVSS 7.1 High · Not analysed yet · Published 20 Mar 2025 · Tags: SQL injection, CWE-379
- [Gradle vulnerable to local privilege escalation through system temporary directory](https://agentprime.io/advisories/CVE-2025-27148.md)
  `CVE-2025-27148` · CVE record: gradle gradle · CVSS 8.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: CWE-378, CWE-379
- [Photoshop Elements | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)](https://agentprime.io/advisories/CVE-2025-21162.md)
  `CVE-2025-21162` · CVE record: Adobe Photoshop Elements · CVSS 5.5 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-379
- [.NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21173.md)
  `CVE-2025-21173` · CVE record: Microsoft .NET 8.0 and 4 more · CVSS 7.3 High · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-379
- [Abuse of Unauthenticated Compliance Recheck in SecureConnector](https://agentprime.io/advisories/CVE-2024-9950.md)
  `CVE-2024-9950` · CVE record: Forescout SecureConnector · CVSS 8.5 High · Not analysed yet · Published 2 Jan 2025 · Tags: CWE-379
- [Autodesk ADP Desktop SDK Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2024-9500.md)
  `CVE-2024-9500` · CVE record: Autodesk Installer · CVSS 7.8 High · Not analysed yet · Published 15 Nov 2024 · Tags: CWE-379
- [Privilege Escalation to SYSTEM in Lakeside Software Installer](https://agentprime.io/advisories/CVE-2023-6080.md)
  `CVE-2023-6080` · CVE record: Lakeside Software SysTrack LsiAgent Installer · CVSS 7.8 High · Not analysed yet · Published 18 Oct 2024 · Tags: CWE-379
- [A vulnerability has been identified in TIA Administrator (All versions < V3 SP2).](https://agentprime.io/advisories/CVE-2023-38533.md)
  `CVE-2023-38533` · CVE record: Siemens TIA Administrator · CVSS 4.8 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-379
- [Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root.](https://agentprime.io/advisories/CVE-2024-36821.md)
  `CVE-2024-36821` · CVE record · CVSS 8.8 High · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-379
- [Zoom Rooms Client for Windows - Improper Access Control](https://agentprime.io/advisories/CVE-2024-24693.md)
  `CVE-2024-24693` · CVE record: Zoom Video Communications, Inc. Zoom Rooms Client for Windows · CVSS 7.2 High · Not analysed yet · Published 13 Mar 2024 · Tags: CWE-379
- [Insecure Permissions in Splashtop Software Updater](https://agentprime.io/advisories/CVE-2023-3181.md)
  `CVE-2023-3181` · CVE record: Splashtop Splashtop Software Updater · CVSS 7.8 High · Not analysed yet · Published 25 Jan 2024 · Tags: CWE-379
- [An issue was addressed with improved handling of temporary files.](https://agentprime.io/advisories/CVE-2023-40438.md)
  `CVE-2023-40438` · CVE record: Apple iOS and iPadOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jan 2024 · Tags: CWE-379
- [Local Privilege Escalation in Windows](https://agentprime.io/advisories/GHSA-9w2p-rh8c-v9g5.md)
  `GHSA-9w2p-rh8c-v9g5`, `CVE-2023-49797`, `PYSEC-2023-292` · PyPI `pyinstaller`: affected `<5.13.1`, fixed in `5.13.1` · CVSS 8.8 High · Not analysed yet · Published 9 Dec 2023 · Tags: Broken access control, CWE-379
- [Insights-client: unsafe handling of temporary files and directories](https://agentprime.io/advisories/CVE-2023-3972.md)
  `CVE-2023-3972` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 7.8 High · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-379
- [The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots.](https://agentprime.io/advisories/CVE-2023-37243.md)
  `CVE-2023-37243` · CVE record: Atera Atera Agent Package Availability · CVSS 7.8 High · Not analysed yet · Published 31 Oct 2023 · Tags: CWE-379
- [Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability.](https://agentprime.io/advisories/CVE-2023-32450.md)
  `CVE-2023-32450` · CVE record: Dell Dell Power Manager (DPM) · CVSS 6.1 Medium · Not analysed yet · Published 27 Jul 2023 · Tags: CWE-379
- [Guava vulnerable to insecure use of temporary directory](https://agentprime.io/advisories/GHSA-7g45-4rm6-3mm3.md)
  `GHSA-7g45-4rm6-3mm3`, `CVE-2023-2976` · Maven `com.google.guava:guava`: affected `>=1.0, <32.0.0-android`, fixed in `32.0.0-android` · CVSS 5.5 Medium · Not analysed yet · Published 14 Jun 2023 · Tags: Information disclosure, CWE-379
- [Adobe Acrobat Reader DC for macOS installer (AcroRdrDC_2200220191_MUI.pkg) contains a local privilege escalation vulnerability.](https://agentprime.io/advisories/CVE-2023-26396.md)
  `CVE-2023-26396` · CVE record: Adobe Acrobat Reader · CVSS 7.8 High · Not analysed yet · Published 12 Apr 2023 · Tags: CWE-379
- [Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation](https://agentprime.io/advisories/CVE-2023-21612.md)
  `CVE-2023-21612` · CVE record: Adobe Acrobat Reader · CVSS 7.8 High · Not analysed yet · Published 18 Jan 2023 · Tags: CWE-379
- [Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation](https://agentprime.io/advisories/CVE-2023-21611.md)
  `CVE-2023-21611` · CVE record: Adobe Acrobat Reader · CVSS 7.8 High · Not analysed yet · Published 18 Jan 2023 · Tags: CWE-379
- [keylime: In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain…](https://agentprime.io/advisories/CVE-2022-23950.md)
  `CVE-2022-23950` · CVE record: keylime · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2022 · Tags: CWE-379
- [Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot](https://agentprime.io/advisories/GHSA-cm59-pr5q-cw85.md)
  `GHSA-cm59-pr5q-cw85`, `CVE-2022-27772` · Maven `org.springframework.boot:spring-boot`: affected `<2.2.11.RELEASE`, fixed in `2.2.11.RELEASE` · CVSS 7.8 High · Not analysed yet · Published 11 Jul 2022 · Tags: Information disclosure, CWE-377, CWE-379
- [Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-40776.md)
  `CVE-2021-40776` · CVE record: Adobe Lightroom Classic · CVSS 6.1 Medium · Not analysed yet · Published 15 Jun 2022 · Tags: CWE-379
- [Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory](https://agentprime.io/advisories/GHSA-wxvp-8q8h-r6rr.md)
  `GHSA-wxvp-8q8h-r6rr`, `CVE-2011-4293`, `PKSA-g5bd-h7mp-y3rr` · Packagist `moodle/moodle`: affected `>=2.0, <2.0.4 || >=2.1, <2.1.1`, fixed in `2.0.4`, `2.1.1` · No CVSS score · Not analysed yet · Published 13 May 2022 · Tags: CWE-379
- [Local Information Disclosure Vulnerability in io.netty:netty-codec-http](https://agentprime.io/advisories/GHSA-269q-hmxg-m83q.md)
  `GHSA-269q-hmxg-m83q`, `CVE-2022-24823` · Maven `io.netty:netty-codec-http`: affected `<4.1.77.Final`, fixed in `4.1.77.Final` · CVSS 5.5 Medium · Not analysed yet · Published 10 May 2022 · Tags: Information disclosure, CWE-378, CWE-379
- [Dell PowerScale OneFS: Dell PowerScale OneFS, 8.2,x, 9.1.0.x, 9.2.1.x…](https://agentprime.io/advisories/CVE-2022-23163.md)
  `CVE-2022-23163` · CVE record: Dell PowerScale OneFS · CVSS 4.7 Medium · Not analysed yet · Published 12 Apr 2022 · Tags: CWE-379
- [Adobe Creative Cloud DLL Hijacking Local Application Denial of Service](https://agentprime.io/advisories/CVE-2021-43017.md)
  `CVE-2021-43017` · CVE record: Adobe GoCart · CVSS 4.2 Medium · Not analysed yet · Published 18 Nov 2021 · Tags: CWE-379
- [Adobe Genuine Service Installer Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-40708.md)
  `CVE-2021-40708` · CVE record: Adobe GoCart · CVSS 7.3 High · Not analysed yet · Published 29 Sept 2021 · Tags: CWE-379
- [Adobe Digital Editions Installer flaw leads to Local Privilege Escalation](https://agentprime.io/advisories/CVE-2021-39828.md)
  `CVE-2021-39828` · CVE record: Adobe Digital Editions · CVSS 5.8 Medium · Not analysed yet · Published 27 Sept 2021 · Tags: CWE-379
- [Adobe Digital Editions Installer flaw leads to Arbitrary File System Write](https://agentprime.io/advisories/CVE-2021-39827.md)
  `CVE-2021-39827` · CVE record: Adobe Digital Editions · CVSS 6.5 Medium · Not analysed yet · Published 27 Sept 2021 · Tags: CWE-379
- [Adobe Creative Cloud Arbitrary File Overwrite Vulnerability](https://agentprime.io/advisories/CVE-2021-28613.md)
  `CVE-2021-28613` · CVE record: Adobe Creative Cloud (desktop component) · CVSS 7.4 High · Not analysed yet · Published 27 Sept 2021 · Tags: CWE-379
- [Adobe Genuine Services insecure file permission could lead to privilege escalation](https://agentprime.io/advisories/CVE-2021-28568.md)
  `CVE-2021-28568` · CVE record: Adobe GoCart · CVSS 5.8 Medium · Not analysed yet · Published 8 Sept 2021 · Tags: CWE-379
- [Adobe Captivate Installer Creation of Temporary File In Directory With Incorrect Permissions Could Lead To Privilege Escalation](https://agentprime.io/advisories/CVE-2021-36002.md)
  `CVE-2021-36002` · CVE record: Adobe Captivate · CVSS 5.0 Medium · Not analysed yet · Published 1 Sept 2021 · Tags: CWE-379
- [Adobe Creative Cloud Installer Arbitrary File Write](https://agentprime.io/advisories/CVE-2021-28633.md)
  `CVE-2021-28633` · CVE record: Adobe Creative Cloud (desktop component) · CVSS 6.1 Medium · Not analysed yet · Published 24 Aug 2021 · Tags: CWE-379

Older: <https://agentprime.io/advisories/tag/cwe-379.md?cursor=WyIyMDIxLTA4LTI0VDE4OjE4OjA5LjM0MDAwMFoiLCJDVkUtMjAyMS0yODYzMyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-379>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-379/>. Everything for agents: <https://agentprime.io/llms.txt>.