Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2025-71176

pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial of service or possibly gain privileges.

VectorLOCAL

PublishedJan 22, 2026, 05:16

Published Bycve@mitre.org

Base Score

Score6.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

pytest(PyPI)09.0.3N/A

References

https://github.com/pytest-dev/pytest/issues/13669
https://www.openwall.com/lists/oss-security/2026/01/21/5

Weakness Type

CWE-379

CVSS Metrics

Base Score

6.8

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Base SeverityMedium

Version

3.1

Attack Vector (AV)

LOCAL