https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 07:29:22 +0000 https://vulnerability.circl.lu/vuln/cve-2025-40909 <p><strong>Affected:</strong> perl</p> <p>Perl threads have a working directory race condition where file operations may target unintended paths.</p> <p>If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any third (or more) thread already running.</p> <p>This may lead to unintended operations such as loading code or accessing files from unexpected locations, which a local attacker may be able to exploit.</p> <p>The bug was introduced in commit 11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6</p> <p><strong>Affected:</strong> perl</p> <p>Perl threads have a working directory race condition where file operations may target unintended paths.</p> <p>If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any third (or more) thread already running.</p> <p>This may lead to unintended operations such as loading code or accessing files from unexpected locations, which a local attacker may be able to exploit.</p> <p>The bug was introduced in commit 11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6</p> https://vulnerability.circl.lu/vuln/cve-2025-40909