filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock can open a crafted SQLite lock database without bounding schema and query work, allowing another local user who can replace the database to make acquisition stall or hang; versions from 3.20.4 expose this on initial per-instance opening, and versions from 3.30.0 repeat the exposure on every acquisition. This issue is fixed in version 4.2.1.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock can open a
    crafted SQLite lock database without bounding schema and query work, allowing another local user who can
    replace the database to make acquisition stall or hang; versions from 3.20.4 expose this on initial per-
    instance opening, and versions from 3.30.0 repeat the exposure on every acquisition. This issue is fixed
    in version 4.2.1. (CVE-2026-112915)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock can open a     crafted SQLite lock database without bounding schema and query work, allowing another local user who can     replace the database to make acquisition stall or hang; versions from 3.20.4 expose this on initial per-     instance opening, and versions from 3.30.0 repeat the exposure on every acquisition. This issue is fixed     in version 4.2.1. (CVE-2026-112915)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
478200	Chainguard: multiple nemo-rl-cuda-13.0 packages: security update to 0.7.0-r20	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
478200	Chainguard: multiple nemo-rl-cuda-13.0 packages: security update to 0.7.0-r20	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
477812	SCA: security update for filelock (GHSA-cwqr-hh33-gh44)	Tenable Cloud Security	SCA Checks	Local	medium
477812	SCA: security update for filelock (GHSA-cwqr-hh33-gh44)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
368987	Linux Distros Unpatched Vulnerability : CVE-2026-112915	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-112915

medium

Tenable Plugins

medium

medium

medium

medium

medium