filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock and AsyncSoftReadWriteLock cache a successful check of the <path>.rw lock tree and resolve its names again during later record operations, allowing another local user who can replace that tree after the first acquisition to redirect lock-record writes into directories writable by the lock user. This issue is fixed in version 4.2.1.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock and
    AsyncSoftReadWriteLock cache a successful check of the <path>.rw lock tree and resolve its names again
    during later record operations, allowing another local user who can replace that tree after the first
    acquisition to redirect lock-record writes into directories writable by the lock user. This issue is fixed
    in version 4.2.1. (CVE-2026-112941)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock and     AsyncSoftReadWriteLock cache a successful check of the <path>.rw lock tree and resolve its names again     during later record operations, allowing another local user who can replace that tree after the first     acquisition to redirect lock-record writes into directories writable by the lock user. This issue is fixed     in version 4.2.1. (CVE-2026-112941)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
478591	Chainguard: multiple dagster packages: security update to 1.13.28-r1	Tenable Cloud Security	Chainguard Local Security Checks	Local	low
478591	Chainguard: multiple dagster packages: security update to 1.13.28-r1	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	low
477810	SCA: security update for filelock (GHSA-wfhq-q4j2-c37m)	Tenable Cloud Security	SCA Checks	Local	low
477810	SCA: security update for filelock (GHSA-wfhq-q4j2-c37m)	Tenable Self-Hosted Container Security	SCA Checks	Local	low
368988	Linux Distros Unpatched Vulnerability : CVE-2026-112941	Nessus	Misc.	Local	low

Detections

Analytics

CVE-2026-112941

low

Tenable Plugins

low

low

low

low

low