CWE-379: Creation of Temporary File in Directory with Insecure Permissions
The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.
From the CWE List. © The MITRE Corporation.
Newest
- pytorch torchserve pytorch/serve: Local privilege escalation through insecure temporary path 7.8 High
- No product listed CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup 5.5 Medium
- sebastianbergmann phpunit PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling 5.4 Medium
- gnupg CVE-2026-118131 9.8 Critical
- asynchttpclient async-http-client AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink 5.8 Medium
- eclipse foundation ankaios In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control... 8.4 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 more Windows Error Reporting Tampering Vulnerability 7.1 High
- aws aws-fpga Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit 7.3 High
- hp inc imagediags HP ImageDiags - Potential Escalation of Privilege 7.0 High
- dell alienware area 51m r2, alienware area-51 aat2265, alienware aurora r13 +14 more +16 more Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following')... 6.6 Medium
- hp inc easy start for macos HP Easy Start for macOS - Security Update 7.7 High
- northebridge luminalshine NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions 6.3 Medium
- servereye gmbh windows agent (sensorhub) Local Privilege Escalation in servereye client (sensorhub) 8.8 High
- osquery osquery: Unprivileged users can temporarily read file carve contents 4.4 Medium
- hp inc. dock accessory HP Dock Accessory WMI Provider Installer Security Update 7.3 High
- earendil-works pi Pi: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts 7.3 High
- opentelemetry opentelemetry.exporter.opentelemetryprotocol, open-telemetry opentelemetry-dotnet +1 more OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter 6.5 Medium
- rarlab winrar WinRAR 5.61 Denial of Service via Malformed Language File 6.9 Medium
- vmware spring data geode, spring data gemfire +1 more Spring Data Geode Insecure Temporary Directory Usage 4.8 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 more Privilege Escalation in mlflow/mlflow 7.0 High
- pytest pytest has vulnerable tmpdir handling 6.8 Medium
- adobe creative cloud desktop, creative cloud +1 more Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379) 5.5 Medium
- ibm cognos controller, controller +1 more IBM Controller Information Disclosure 4.3 Medium
- revenera installshield A potential elevated privilege issue has been reported with InstallShield built Standalone MSI... 7.3 High
- isc kea Insecure handling of file paths allows multiple local attacks 6.1 Medium
- nixos nixpkgs Local privilege escalation in make-initrd-ng 8.8 High
- llamaindex, run-llama run-llama/llama index +1 more SQL Injection in run-llama/llama_index 7.1 High
- gradle Gradle vulnerable to local privilege escalation through system temporary directory 8.8 High
- adobe photoshop elements Photoshop Elements | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379) 5.5 Medium
- microsoft .net, .net 8.0, .net 9.0 +5 more +7 more .NET Elevation of Privilege Vulnerability 7.3 High
- forescout secureconnector Abuse of Unauthenticated Compliance Recheck in SecureConnector 8.5 High
- autodesk installer Autodesk ADP Desktop SDK Privilege Escalation Vulnerability 7.8 High
- lakeside software systrack lsiagent installer, lakesidesoftware systrack lsiagent +1 more Privilege Escalation to SYSTEM in Lakeside Software Installer 7.8 High
- siemens tia administrator A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected... 4.8 Medium
- linksys velop whw0101 firmware, whw01v1 firmware +1 more Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate... 6.8 Medium
- zoom rooms, zoom video communications, inc. rooms client for windows +1 more Zoom Rooms Client for Windows - Improper Access Control 7.2 High
- splashtop, splashtop software updater, streamer +3 more +5 more Insecure Permissions in Splashtop Software Updater 7.8 High
- apple ipados, macos, ios and ipados +1 more +3 more An issue was addressed with improved handling of temporary files. This issue is fixed in macOS... 5.5 Medium
- pyinstaller Local Privilege Escalation in pyinstaller on Windows 8.8 High
- redhat insights-client, red hat enterprise linux 6, enterprise linux 7 +29 more +31 more Insights-client: unsafe handling of temporary files and directories 7.8 High
- atera agent package availability The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is... 7.8 High
- dell power manager, power manager (dpm) +1 more Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A... 6.1 Medium
- google guava Use of temporary directory for file creation in `FileBackedOutputStream` in Guava 5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 more Adobe Acrobat Reader DC for macOS installer (AcroRdrDC_2200220191_MUI.pkg) contains a local privilege escalation vulnerability. 7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 more Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation 7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 more Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation 7.8 High
- keylime keylime-agent-6.3.0-1.1 on GA media 7.5 High
- adobe lightroom, lightroom classic +1 more Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability 6.1 Medium
- netty, netapp active iq unified manager, oncommand workflow automation +2 more +4 more Local Information Disclosure Vulnerability in io.netty:netty-codec-http 5.5 Medium
- dell powerscale onefs, emc powerscale onefs +1 more Dell PowerScale OneFS, 8.2,x, 9.1.0.x, 9.2.1.x, and 9.3.0.x contain a denial of service... 4.7 Medium
- Show olderLoading…