-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability description highlights that the attack occurs between the symlink check in shutil.rmtree() and the actual deletion. The code in shutil.py line 623 (referenced in the CVE) shows the symlink check, but the non-atomic operation allows a time-of-check to time-of-use (TOCTOU) race condition. This makes shutil.rmtree the critical vulnerable function. While PyInstaller's use of tempfile.mkdtemp contributed to insecure temporary directories, the immediate vulnerability trigger is the race condition in shutil.rmtree during deletion.
PythonPython| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| pyinstaller | pip | < 5.13.1 | 5.13.1 |
KEV Misses 88% of Exploited CVEs- Get the report