filelock is a platform-independent file lock for Python. From 3.32.6 until 4.2.1, SoftFileLock can follow a swapped symbolic link during the conditional os.access writability check for a node without its owner-write bit, allowing another local user on a platform and directory configuration that follows the link to infer whether a chosen path exists and is writable from the observable acquisition result. This issue is fixed in version 4.2.1.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - filelock is a platform-independent file lock for Python. From 3.32.6 until 4.2.1, SoftFileLock can follow
    a swapped symbolic link during the conditional os.access writability check for a node without its owner-
    write bit, allowing another local user on a platform and directory configuration that follows the link to
    infer whether a chosen path exists and is writable from the observable acquisition result. This issue is
    fixed in version 4.2.1. (CVE-2026-112912)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - filelock is a platform-independent file lock for Python. From 3.32.6 until 4.2.1, SoftFileLock can follow     a swapped symbolic link during the conditional os.access writability check for a node without its owner-     write bit, allowing another local user on a platform and directory configuration that follows the link to     infer whether a chosen path exists and is writable from the observable acquisition result. This issue is     fixed in version 4.2.1. (CVE-2026-112912)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
478293	Chainguard: multiple litellm packages: security update to 1.106.6-r3	Tenable Cloud Security	Chainguard Local Security Checks	Local	low
478293	Chainguard: multiple litellm packages: security update to 1.106.6-r3	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	low
477790	SCA: security update for filelock (GHSA-9j6q-wvj5-jgjg)	Tenable Cloud Security	SCA Checks	Local	low
477790	SCA: security update for filelock (GHSA-9j6q-wvj5-jgjg)	Tenable Self-Hosted Container Security	SCA Checks	Local	low
369002	Linux Distros Unpatched Vulnerability : CVE-2026-112912	Nessus	Misc.	Local	low

Detections

Analytics

CVE-2026-112912

low

Tenable Plugins

low

low

low

low

low