filelock is a platform-independent file lock for Python. From 4.0.0 until 4.2.1, SoftReadWriteLock refreshes holder records by name, allowing another local user with rename access to the lock directory to replace a record with a named pipe and stall the lock, or under a permissive hard-link policy to link a reachable target file and cause the lock user to write through it. This issue is fixed in version 4.2.1.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - filelock is a platform-independent file lock for Python. From 4.0.0 until 4.2.1, SoftReadWriteLock
    refreshes holder records by name, allowing another local user with rename access to the lock directory to
    replace a record with a named pipe and stall the lock, or under a permissive hard-link policy to link a
    reachable target file and cause the lock user to write through it. This issue is fixed in version 4.2.1.
    (CVE-2026-112934)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - filelock is a platform-independent file lock for Python. From 4.0.0 until 4.2.1, SoftReadWriteLock     refreshes holder records by name, allowing another local user with rename access to the lock directory to     replace a record with a named pipe and stall the lock, or under a permissive hard-link policy to link a     reachable target file and cause the lock user to write through it. This issue is fixed in version 4.2.1.
    (CVE-2026-112934)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
478593	Chainguard: multiple dagster packages: security update to 1.13.28-r1	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
478593	Chainguard: multiple dagster packages: security update to 1.13.28-r1	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
477807	SCA: security update for filelock (GHSA-fj95-fr6c-h845)	Tenable Cloud Security	SCA Checks	Local	medium
477807	SCA: security update for filelock (GHSA-fj95-fr6c-h845)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
368989	Linux Distros Unpatched Vulnerability : CVE-2026-112934	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-112934

medium

Tenable Plugins

medium

medium

medium

medium

medium