CWE-377 Insecure Temporary File

Terragrunt catalog predictable temp symlink clobber

Metalama allows local code execution through DLL planting in shared temporary directories

yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

Spring Boot: Predictable Temp Directory in Artemis Auto-configuration

ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

Linuxfabrik Monitoring Plugins allow insecure creation of SQLite databases

mktemp: empty TMPDIR creates temp files in CWD instead of /tmp

Duplicate Advisory: uutils coreutils' mktemp utility doesn't properly handle an empty TMPDIR environment variable

@anthropic-ai/claude-code has an Insecure Temporary File in /copy Command that Enables Response Disclosure and Symlink-Based File Write

instack-undercloud vulnerable to symlink attack on tmp files

RPLY Predictable Tmpfile Names Allows Cache Spoofing

Spring AI's ONNX model cache defaults to world-writable predictable /tmp directory

Spring Boot accepts predictable temp directory without ownership verification

poetry-plugin-tweak-dependencies-version affected by CVE-2026-25645

Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

Capgo CLI: symlink-following local secret writes enable arbitrary file overwrite + world-readable credentials (0600 missing)

Robocode has an insecure temporary file creation vulnerability in the AutoExtract component

Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality

llama-index has Insecure Temporary File

Spring Cloud Contract vulnerable to local information disclosure

Insecure Temporary File usage in github.com/golang/glog

Active Support Possibly Discloses Locally Encrypted Files

ansible-runner vulnerable to Race Condition

transformers has Insecure Temporary File

Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File