filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock path and pass it to SQLite without rejecting a final symbolic link, allowing another local user who can create names in the lock directory to redirect database creation and locking or split mutual exclusion between targets. This issue is fixed in version 4.0.9.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and
    AsyncReadWriteLock versions from 3.20.4 resolve the lock path and pass it to SQLite without rejecting a
    final symbolic link, allowing another local user who can create names in the lock directory to redirect
    database creation and locking or split mutual exclusion between targets. This issue is fixed in version
    4.0.9. (CVE-2026-112936)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and     AsyncReadWriteLock versions from 3.20.4 resolve the lock path and pass it to SQLite without rejecting a     final symbolic link, allowing another local user who can create names in the lock directory to redirect     database creation and locking or split mutual exclusion between targets. This issue is fixed in version     4.0.9. (CVE-2026-112936)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
478207	Chainguard: multiple nemo-rl-cuda-13.0 packages: security update to 0.7.0-r20	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
478207	Chainguard: multiple nemo-rl-cuda-13.0 packages: security update to 0.7.0-r20	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
477794	SCA: security update for filelock (GHSA-j8f7-rjxc-mr56)	Tenable Cloud Security	SCA Checks	Local	medium
477794	SCA: security update for filelock (GHSA-j8f7-rjxc-mr56)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
368992	Linux Distros Unpatched Vulnerability : CVE-2026-112936	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-112936

medium

Tenable Plugins

medium

medium

medium

medium

medium