Insecure temporary file handling

published 2018-08-20 8 y ago modified 2026-06-16 4 mo ago also GHSA-xrr4-74mc-rpjc , PYSEC-2018-99 , EUVD-2018-0125

cvss: 7.5; version 3.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 2.2%; EPSS 2.2% chance of exploitation in 30 days, percentile 82%
public exploits: 0; none known

pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.

Patch / fix

fixed in 2 links 1

pypi pyro 3.15
pyro_project pyro 3.15

github.com/irmen/Pyro3@554e095 commit

Exploit prediction

2.21% chance of exploitation in the next 30 days, higher than 82% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

bugs.debian.org https://bugs.debian.org/631912 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	3.0	7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD	2.0	5.0	AV:N/AC:L/Au:N/C:N/I:P/A:N
GitHub	3.0	7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected packages

ecosystem	package	affected	fixed in
pypi	pyro	<3.15	3.15

Classification

Weakness

CWE-59 Improper Link Resolution Before File Access

References

github.com /irmen/Pyro3/commit/554e095a62c4412c91f981e72fd34a936ac2bf1e
web, third-party-advisory, patch
bugs.debian.org /631912
web, exploit, issue-tracking, third-party-advisory
pythonhosted.org /Pyro/12-changes.html
web, vendor-advisory
nvd.nist.gov /vuln/detail/CVE-2011-2765
advisory
github.com /irmen/Pyro3
package
github.com /pypa/advisory-database/tree/main/vulns/pyro/PYSEC-2018-99.yaml
web
github.com /advisories/GHSA-xrr4-74mc-rpjc
advisory

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary