CWE-377 · Insecure Temporary File

100 CVEs classified under CWE-377 (Insecure Temporary File). Browse by severity and year.

Top CVEs for CWE-377
CVESeverityScorePublishedSummary
CVE-2011-4119Critical9.82021-10-26caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.
CVE-2012-2666Critical9.82021-07-09golang/go in 1.0.2 fixes all.bash on shared machines. dotest() in src/pkg/debug/gosym/pclntab_test.go creates a temporary file with predicable name and execute…
CVE-2015-5224Critical9.82017-08-23The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.
CVE-2013-4561Critical9.12022-06-30In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity.
CVE-2018-16494High8.82021-05-26In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result…
CVE-2025-14307High8.12025-12-09An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely…
CVE-2023-43498High8.12023-09-20In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using MultipartFormDataParser creates temporary files in the default system temp…
CVE-2022-21809High8.12022-05-12A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arb…
CVE-2025-46369High7.82025-11-13Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker with local…
CVE-2025-7707High7.82025-10-13The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user enviro…
CVE-2025-34194High7.82025-09-19Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 (Windows client deployments)…
CVE-2020-1991High7.82020-04-08An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files…
CVE-2018-6705High7.82018-12-12Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command executi…
CVE-2018-6704High7.82018-12-12Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command executi…
CVE-2018-3710High7.82018-03-21Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execu…
CVE-2025-67223High7.52026-04-28The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12 stores daily activity logs with predictable names in a publicly acc…
CVE-2026-20649High7.52026-02-11A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3. A user…
CVE-2013-4253High7.52022-10-19The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root user's aut…
CVE-2022-0315High7.52022-03-24Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0.
CVE-2022-0736High7.52022-02-23Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.
All CVEs classified under CWE-377 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-73585Medium6.32026-08-13A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlin…
CVE-2026-73584Medium6.32026-08-13A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary…
CVE-2026-16791Low3.92026-08-04A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker t…
CVE-2026-44878High7.22026-07-21A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device's f…
CVE-2026-622942026-07-15Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and follo…
CVE-2026-46406Medium6.12026-06-29Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wrote responses to a hardcoded, predictable path (/tmp/claude/…
CVE-2026-41991Medium4.72026-06-29GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH…
CVE-2026-41001Medium5.32026-06-11Spring Boot's ArtemisEmbeddedConfigurationFactory uses a fixed, static path for the embedded Artemis message broker's data directory when no explicit path is c…
CVE-2026-45384Medium6.12026-06-10bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.12, there is an arbitrary file overw…
CVE-2026-49135High7.12026-06-01CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with…
CVE-2026-49134High7.12026-06-01CodexBar prior to 0.32.0 contains a privilege escalation vulnerability in the CLI installer that allows local attackers to execute arbitrary commands as root b…
CVE-2025-67223High7.52026-04-28The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12 stores daily activity logs with predictable names in a publicly acc…
CVE-2026-40979Medium6.12026-04-28In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1…
CVE-2026-40973High7.02026-04-28A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTemp`. When `server.servlet.session.persi…
CVE-2026-35342Low3.32026-04-22The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp, which falls back to /tmp when TMPDIR i…
CVE-2026-20204High7.12026-04-15In Splunk Enterprise versions below 10.2.1, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.5, 10.2.2510.9, 10.1.25…
CVE-2026-4822High7.02026-03-25A vulnerability was detected in Enter Software Iperius Backup up to 8.7.3. Affected is an unknown function of the file C:\ProgramData\IperiusBackup\Jobs\ of th…
CVE-2026-25645Medium4.42026-03-25Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting f…
CVE-2026-20651Medium6.22026-03-25A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An…
CVE-2026-257012026-02-25An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects like: * gain access…
CVE-2026-20649High7.52026-02-11A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3. A user…
CVE-2026-20618Medium5.52026-02-11An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.3. An app may be able to access user-sensitive data.
CVE-2025-14614Medium6.72026-01-07Insecure Temporary File vulnerability in Altera Quartus Prime Standard  Installer (SFX) on Windows, Altera Quartus Prime Lite  Installer (SFX) on Windows…
CVE-2025-14612Medium6.72026-01-07Insecure Temporary File vulnerability in Altera Quartus Prime Pro  Installer (SFX) on Windows allows : Use of Predictable File Names.This issue affects Quar…
CVE-2025-66625Medium4.92025-12-09Umbraco is an ASP.NET CMS. Due to unsafe handling and deletion of temporary files in versions 10.0.0 through 13.12.0, during the dictionary upload process an a…
CVE-2025-14307High8.12025-12-09An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely…
CVE-2025-46369High7.82025-11-13Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker with local…
CVE-2025-46368Medium6.62025-11-13Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker with local…
CVE-2025-7707High7.82025-10-13The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user enviro…
CVE-2025-61659Medium6.82025-09-29bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name.
CVE-2025-34194High7.82025-09-19Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 (Windows client deployments)…
CVE-2025-9474Medium4.52025-08-26A vulnerability was detected in Mihomo Party up to 1.8.1 on macOS. Affected is the function enableSysProxy of the file src/main/sys/sysproxy.ts of the componen…
CVE-2015-0849Low3.92025-06-26pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability.
CVE-2024-495062024-11-13Insecure creation of temporary files allows local users on systems with non-default configurations to cause denial of service or set the encryption key for a f…
CVE-2024-10372Medium4.52024-10-25A vulnerability classified as problematic was found in chidiwilliams buzz 1.1.0. This vulnerability affects the function download_model of the file buzz/model_…
CVE-2024-66542024-09-27Products for macOS enables a user logged on to the system to perform a denial-of-service attack, which could be misused to disable the protection of the ESET s…
CVE-2024-34490Medium5.12024-05-05In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local attac…
CVE-2024-2313Low2.82024-03-10If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to…
CVE-2024-23287Medium5.52024-03-08A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An a…
CVE-2024-22236Low3.32024-01-31In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution is vulnerable to loc…
CVE-2023-49347Medium6.02023-12-14Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a loca…
CVE-2023-49346Medium6.02023-12-14Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or manipulated. The data is stored in a lo…
CVE-2023-49345Medium6.02023-12-14Temporary data passed between application components by Budgie Extras Takeabreak applet could potentially be viewed or manipulated. The data is stored in a loc…
CVE-2023-49344Medium6.02023-12-14Temporary data passed between application components by Budgie Extras Window Shuffler applet could potentially be viewed or manipulated. The data is stored in…
CVE-2023-49342Medium6.02023-12-14Temporary data passed between application components by Budgie Extras Clockworks applet could potentially be viewed or manipulated. The data is stored in a loc…
CVE-2023-43498High8.12023-09-20In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using MultipartFormDataParser creates temporary files in the default system temp…
CVE-2023-2800Medium4.72023-05-18Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.
CVE-2022-34387Medium6.42023-02-11 Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain a privilege escalation vuln…
CVE-2022-24913Medium5.52023-01-12Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdT…
CVE-2018-25068Medium6.32023-01-06A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the fi…
CVE-2022-4817Low3.12022-12-28A vulnerability was found in centic9 jgit-cookbook. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to ins…
CVE-2022-26386Medium6.52022-12-22Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in <code>/tmp</code>, but this behavior was changed to downl…
CVE-2022-4641Low2.52022-12-21A vulnerability was found in pig-vector and classified as problematic. Affected by this issue is the function LogisticRegression of the file src/main/java/org/…
CVE-2022-41954Low3.32022-11-25MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems (not Windows or mac…
CVE-2022-41946Medium4.72022-11-23pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `PreparedStatement.setText(int, InputStream)` or `Prepa…
CVE-2022-3969Low2.62022-11-13A vulnerability was found in OpenKM up to 6.3.11 and classified as problematic. Affected by this issue is the function getFileExtension of the file src/main/ja…
CVE-2022-3952Low2.62022-11-11A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of th…
CVE-2013-4253High7.52022-10-19The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root user's aut…
CVE-2017-20147Medium6.52022-09-20In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing arb…
CVE-2022-35631Medium5.52022-07-29On MacOS and Linux, it may be possible to perform a symlink attack by replacing this predictable file name with a symlink to another file and have the Velocira…
CVE-2013-4561Critical9.12022-06-30In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity.
CVE-2022-21809High8.12022-05-12A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arb…
CVE-2021-22572Medium5.52022-03-29On unix-like systems, the system temporary directory is shared between all users on that system. The root cause is File.createTempFile creates files in the the…
CVE-2022-0315High7.52022-03-24Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0.
CVE-2022-21945Medium5.12022-03-16A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-default systems…
CVE-2021-46705Medium5.12022-03-16A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbit…
CVE-2022-0736High7.52022-02-23Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.
CVE-2011-4119Critical9.82021-10-26caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.
CVE-2012-2666Critical9.82021-07-09golang/go in 1.0.2 fixes all.bash on shared machines. dotest() in src/pkg/debug/gosym/pclntab_test.go creates a temporary file with predicable name and execute…
CVE-2018-16494High8.82021-05-26In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result…
CVE-2021-20202High7.32021-05-12A flaw was found in keycloak. Directories can be created prior to the Java process creating them in the temporary directory, but with wider user permissions, a…
CVE-2021-25316Low3.32021-04-14A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to pre…
CVE-2021-29429Medium4.02021-04-12In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by G…
CVE-2020-35451Medium4.72021-03-09There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib d…
CVE-2020-8032Medium6.72021-02-25A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: open…
CVE-2020-8030Low3.62021-02-11A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file b…
CVE-2020-8027High7.32021-02-11A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, open…
CVE-2020-25636Medium6.62020-10-05A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to…
CVE-2020-10744Medium5.02020-05-15An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The pro…
CVE-2020-2016High7.02020-05-13A race condition due to insecure creation of a file in a temporary directory vulnerability in PAN-OS allows for root privilege escalation from a limited linux…
CVE-2020-1994Medium4.12020-05-13A predictable temporary file vulnerability in PAN-OS allows a local authenticated user with shell access to corrupt arbitrary system files affecting the integr…
CVE-2020-1991High7.82020-04-08An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files…
CVE-2020-1740Low3.92020-03-16A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same co…
CVE-2020-1981High7.02020-03-11A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shel…
CVE-2020-1733Medium5.02020-03-11A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user…
CVE-2018-17955Low2.22019-03-15In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection
CVE-2018-19640Medium4.42019-03-05If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can k…
CVE-2018-19638Low2.22019-03-05In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the direc…
CVE-2018-19637Low2.82019-03-05Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink protect…
CVE-2018-6706High7.52018-12-12Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows an Unprivileged User to introduce custom paths du…
CVE-2018-6705High7.82018-12-12Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command executi…
CVE-2018-6704High7.82018-12-12Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command executi…
CVE-2016-9595High7.32018-07-27A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to condu…
CVE-2017-16024Medium6.52018-06-04The sync-exec module is used to simulate child_process.execSync in node versions <0.11.9. Sync-exec uses tmp directories as a buffer before returning values. O…
CVE-2018-3710High7.82018-03-21Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execu…
CVE-2018-1053High7.02018-02-09In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current workin…
CVE-2017-15111Medium5.52018-01-20keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.
CVE-2017-7549Medium6.42017-09-21A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as pa…
CVE-2017-7560Medium5.52017-09-13It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes.
CVE-2015-5224Critical9.82017-08-23The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.