CWE-379.

pytorch/serve: Local privilege escalation through insecure temporary path

• PyTorch TorchServe
• CWE-379

PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling

• CWE-379

>=13.4.0, <13.4.4 · fixed in 13.4.4

CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup

• Path traversal
• CWE-379

CVE-2026-118131

• GnuPG
• Broken access control
• CWE-379

AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink

• AsyncHttpClient async-http-client
• Broken access control
• CWE-61

Incorrect default permissions in Eclipse Foundation Eclipse Ankaios

• Eclipse Foundation Eclipse Ankaios
• Broken access control
• Race condition

Windows Error Reporting Tampering Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-379

Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

• aws-fpga
• CWE-379

HP ImageDiags - Potential Escalation of Privilege

• HP Inc HP ImageDiags
• CWE-379

Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability.

• Dell Alienware Area 51m R2
• Dell Alienware Area-51 AAT2265
• CWE-379

HP Easy Start for macOS - Security Update

• HP Inc HP Easy Start for macOS
• CWE-379

NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

• NortheBridge luminalshine
• Broken access control
• CWE-379

Local Privilege Escalation in servereye client (sensorhub)

• servereye GmbH servereye Windows Agent (Sensorhub)
• Path traversal
• Privilege escalation

osquery: Unprivileged users can temporarily read file carve contents

• osquery
• CWE-279
• CWE-378

HP Dock Accessory WMI Provider Installer Security Update

• HP Inc. HP Dock Accessory
• CWE-379

Pi Agent: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts

• CWE-379

>=0.74.0, <0.78.1 · fixed in 0.78.1

OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter

• CWE-379

>=1.8.0, <1.15.3 · fixed in 1.15.3

WinRAR 5.61 Denial of Service via Malformed Language File

• Win-Rar WinRAR
• CWE-379

Spring Data Geode Insecure Temporary Directory Usage

• VMware Spring Data Geode
• VMware Spring Data Gemfire
• Information disclosure
• CWE-378

mlflow Creates of Temporary File in Directory with Insecure Permissions

• CWE-379

<3.4.0rc0 · fixed in 3.4.0rc0

pytest has vulnerable tmpdir handling

• CWE-379

<9.0.3 · fixed in 9.0.3

Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)

• Adobe Creative Cloud Desktop
• CWE-379

IBM Controller Information Disclosure

• IBM Controller
• IBM Cognos Controller
• CWE-379

Revenera InstallShield: A potential elevated privilege issue has been reported with InstallShield built…

• Revenera InstallShield
• CWE-379

Insecure handling of file paths allows multiple local attacks

• ISC Kea
• Path traversal
• CWE-379

Local privilege escalation in make-initrd-ng

• NixOS nixpkgs
• CWE-378
• CWE-379

LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions

• SQL injection
• CWE-379

<0.12.3 · fixed in 0.12.3

Gradle vulnerable to local privilege escalation through system temporary directory

• gradle
• CWE-378
• CWE-379

Photoshop Elements | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)

• Adobe Photoshop Elements
• CWE-379

.NET Elevation of Privilege Vulnerability

• Microsoft .NET 8.0
• Microsoft .NET 9.0
• CWE-379

Abuse of Unauthenticated Compliance Recheck in SecureConnector

• Forescout SecureConnector
• CWE-379

Autodesk ADP Desktop SDK Privilege Escalation Vulnerability

• Autodesk Installer
• CWE-379

Privilege Escalation to SYSTEM in Lakeside Software Installer

• Lakeside Software SysTrack LsiAgent Installer
• CWE-379

A vulnerability has been identified in TIA Administrator (All versions < V3 SP2).

• Siemens TIA Administrator
• CWE-379

Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root.

• CWE-379

Zoom Rooms Client for Windows - Improper Access Control

• Zoom Video Communications, Inc. Zoom Rooms Client for Windows
• CWE-379

Insecure Permissions in Splashtop Software Updater

• Splashtop Software Updater
• CWE-379

An issue was addressed with improved handling of temporary files.

• Apple iOS and iPadOS
• Apple macOS
• CWE-379

Local Privilege Escalation in Windows

• Broken access control
• CWE-379

<5.13.1 · fixed in 5.13.1

Insights-client: unsafe handling of temporary files and directories

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• CWE-379

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots.

• Atera Agent Package Availability
• CWE-379

Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability.

• Dell Power Manager (DPM)
• CWE-379

Guava vulnerable to insecure use of temporary directory

• Information disclosure
• CWE-379

>=1.0, <32.0.0-android · fixed in 32.0.0-android

Adobe Acrobat Reader DC for macOS installer (AcroRdrDC_2200220191_MUI.pkg) contains a local privilege escalation vulnerability.

• Adobe Acrobat Reader
• CWE-379

Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation

• Adobe Acrobat Reader
• CWE-379

Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation

• Adobe Acrobat Reader
• CWE-379

keylime: In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain…

• keylime
• CWE-379

Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

• Information disclosure
• CWE-377

<2.2.11.RELEASE · fixed in 2.2.11.RELEASE

Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability

• Adobe Lightroom Classic
• CWE-379

Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory

• CWE-379

>=2.0, <2.0.4 || >=2.1, <2.1.1 · fixed in 2.0.4, 2.1.1

Local Information Disclosure Vulnerability in io.netty:netty-codec-http

• Information disclosure
• CWE-378

<4.1.77.Final · fixed in 4.1.77.Final

Dell PowerScale OneFS: Dell PowerScale OneFS, 8.2,x, 9.1.0.x, 9.2.1.x…

• Dell PowerScale OneFS
• CWE-379

Adobe Creative Cloud DLL Hijacking Local Application Denial of Service

• Adobe GoCart
• CWE-379

Adobe Genuine Service Installer Privilege Escalation Vulnerability

• Adobe GoCart
• CWE-379

Adobe Digital Editions Installer flaw leads to Local Privilege Escalation

• Adobe Digital Editions
• CWE-379

Adobe Digital Editions Installer flaw leads to Arbitrary File System Write

• Adobe Digital Editions
• CWE-379

Adobe Creative Cloud Arbitrary File Overwrite Vulnerability

• Adobe Creative Cloud (desktop component)
• CWE-379

Adobe Genuine Services insecure file permission could lead to privilege escalation

• Adobe GoCart
• CWE-379

Adobe Captivate Installer Creation of Temporary File In Directory With Incorrect Permissions Could Lead To Privilege Escalation

• Adobe Captivate
• CWE-379

Adobe Creative Cloud Installer Arbitrary File Write

• Adobe Creative Cloud (desktop component)
• CWE-379