agentprime: CWE-379

CVE-2026-123974: pytorch/serve: Local privilege escalation through insecure temporary path

Fri, 06 Nov 2026 19:52:16 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling

Fri, 30 Oct 2026 23:01:21 GMT

phpunit/phpunit >=13.4.0, <13.4.4, fixed in 13.4.4. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-118990: CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup

Fri, 30 Oct 2026 13:12:29 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-118131: CVE-2026-118131

Tue, 27 Oct 2026 17:23:46 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102740: AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink

Thu, 15 Oct 2026 17:25:30 GMT

CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86836: Incorrect default permissions in Eclipse Foundation Eclipse Ankaios

Mon, 14 Sep 2026 17:44:56 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69482: Windows Error Reporting Tampering Vulnerability

Tue, 08 Sep 2026 17:15:43 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85028: Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

Thu, 03 Sep 2026 18:07:19 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-82346: HP ImageDiags - Potential Escalation of Privilege

Mon, 31 Aug 2026 20:35:39 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63693: Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability.

Mon, 24 Aug 2026 19:40:03 GMT

CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-12555: HP Easy Start for macOS - Security Update

Mon, 24 Aug 2026 16:00:23 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-50544: NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

Wed, 12 Aug 2026 23:18:03 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14551: Local Privilege Escalation in servereye client (sensorhub)

Wed, 22 Jul 2026 09:42:34 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46388: osquery: Unprivileged users can temporarily read file carve contents

Fri, 10 Jul 2026 14:44:52 GMT

CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-7539: HP Dock Accessory WMI Provider Installer Security Update

Wed, 24 Jun 2026 19:47:15 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

Pi Agent: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts

Wed, 17 Jun 2026 13:55:13 GMT

@earendil-works/pi-coding-agent >=0.74.0, <0.78.1, fixed in 0.78.1. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter

Thu, 30 Apr 2026 18:34:30 GMT

OpenTelemetry.Exporter.OpenTelemetryProtocol >=1.8.0, <1.15.3, fixed in 1.15.3. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2019-25677: WinRAR 5.61 Denial of Service via Malformed Language File

Sun, 05 Apr 2026 20:45:28 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-2817: Spring Data Geode Insecure Temporary Directory Usage

Thu, 19 Feb 2026 17:18:09 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

mlflow Creates of Temporary File in Directory with Insecure Permissions

Mon, 02 Feb 2026 12:31:14 GMT

mlflow <3.4.0rc0, fixed in 3.4.0rc0. CVSS 7.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

pytest has vulnerable tmpdir handling

Thu, 22 Jan 2026 06:30:29 GMT

pytest <9.0.3, fixed in 9.0.3. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-64896: Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)

Tue, 09 Dec 2025 20:39:50 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-33111: IBM Controller Information Disclosure

Mon, 08 Dec 2025 21:28:37 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-7562: Revenera InstallShield: A potential elevated privilege issue has been reported with InstallShield built…

Thu, 12 Jun 2025 16:05:31 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-32802: Insecure handling of file paths allows multiple local attacks

Wed, 28 May 2025 17:08:11 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-32438: Local privilege escalation in make-initrd-ng

Tue, 15 Apr 2025 19:57:04 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions

Thu, 20 Mar 2025 12:32:44 GMT

llama-index <0.12.3, fixed in 0.12.3. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-27148: Gradle vulnerable to local privilege escalation through system temporary directory

Tue, 25 Feb 2025 20:13:51 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-21162: Photoshop Elements | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)

Tue, 11 Feb 2025 17:35:12 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-21173: .NET Elevation of Privilege Vulnerability

Tue, 14 Jan 2025 18:04:02 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-9950: Abuse of Unauthenticated Compliance Recheck in SecureConnector

Thu, 02 Jan 2025 15:40:36 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-9500: Autodesk ADP Desktop SDK Privilege Escalation Vulnerability

Fri, 15 Nov 2024 21:24:22 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-6080: Privilege Escalation to SYSTEM in Lakeside Software Installer

Fri, 18 Oct 2024 16:09:48 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-38533: A vulnerability has been identified in TIA Administrator (All versions < V3 SP2).

Tue, 11 Jun 2024 11:14:55 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-36821: Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root.

Tue, 11 Jun 2024 00:00:00 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-24693: Zoom Rooms Client for Windows - Improper Access Control

Wed, 13 Mar 2024 19:30:22 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-3181: Insecure Permissions in Splashtop Software Updater

Thu, 25 Jan 2024 15:22:47 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-40438: An issue was addressed with improved handling of temporary files.

Wed, 10 Jan 2024 22:03:50 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Local Privilege Escalation in Windows

Sat, 09 Dec 2023 00:39:46 GMT

pyinstaller <5.13.1, fixed in 5.13.1. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-3972: Insights-client: unsafe handling of temporary files and directories

Wed, 01 Nov 2023 15:54:52 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-37243: The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots.

Tue, 31 Oct 2023 14:34:03 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-32450: Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability.

Thu, 27 Jul 2023 04:33:21 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Guava vulnerable to insecure use of temporary directory

Wed, 14 Jun 2023 18:30:38 GMT

com.google.guava:guava >=1.0, <32.0.0-android, fixed in 32.0.0-android. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-26396: Adobe Acrobat Reader DC for macOS installer (AcroRdrDC_2200220191_MUI.pkg) contains a local privilege escalation vulnerability.

Wed, 12 Apr 2023 00:00:00 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-21612: Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation

Wed, 18 Jan 2023 00:00:00 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-21611: Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation

Wed, 18 Jan 2023 00:00:00 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-23950: keylime: In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain…

Wed, 21 Sep 2022 18:25:02 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

Mon, 11 Jul 2022 20:59:02 GMT

org.springframework.boot:spring-boot <2.2.11.RELEASE, fixed in 2.2.11.RELEASE. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2021-40776: Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability

Wed, 15 Jun 2022 18:35:47 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory

Fri, 13 May 2022 01:13:14 GMT

moodle/moodle >=2.0, <2.0.4 || >=2.1, <2.1.1, fixed in 2.0.4, 2.1.1. Published by the GitHub Advisory Database. Not analysed by agentprime yet.