CVE-2025-71176

medium Red Hat
CVSS v3 Base Score
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Published: January 22, 2026
Last Modified: January 22, 2026
Vendor: Red Hat

Description

pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial of service or possibly gain privileges.

CWE

CWE-379

Affected Products

OpenShift Service Mesh 2Red Hat AI Inference ServerRed Hat Ansible Automation Platform 2Red Hat Enterprise Linux 10Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat OpenShift AI (RHOAI)Red Hat OpenShift Container Platform 4

References

🔗 bugzilla.redhat.com 🔗 www.cve.org 🔗 nvd.nist.gov 🔗 github.com 🔗 www.openwall.com