pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial of service or possibly gain privileges.
History

Thu, 22 Jan 2026 05:15:00 +0000

Type Values Removed Values Added
Description pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial of service or possibly gain privileges.
Weaknesses CWE-379
References
Metrics cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L'}


cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-01-22T06:50:44.054Z

Reserved: 2026-01-22T04:59:16.985Z

Link: CVE-2025-71176

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-01-22T05:16:17.577

Modified: 2026-01-22T05:16:17.577

Link: CVE-2025-71176

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.