PT-2026-3918 · Pytest · Pytest

Published 2026-01-22 · Updated 2026-01-22 · CVE-2025-71176

Positive Technologies · (AI Summary)

CVSS v3.1

6.8

6.8

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions pytest versions through 9.0.2

Description The software on UNIX systems creates directories using a predictable naming pattern, specifically '/tmp/pytest-of-{user}'. This design flaw allows local users to potentially disrupt service or escalate privileges.

Recommendations Update to a version of pytest later than 9.0.2.

Fix

DoS

LPE

Weakness Enumeration

CWE-379

Related Identifiers

CVE-2025-71176

Affected Products

Pytest

References · 12

• https://security-tracker.debian.org/tracker/CVE-2025-71176 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-71176 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-71176 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71176 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-71176 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-71176 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-71176 · Vendor Advisory
• https://github.com/pytest-dev/pytest/issues/13669 · Note
• https://twitter.com/CVEnew/status/2014213536948376014 · Twitter Post
• https://openwall.com/lists/oss-security/2026/01/21/5 · Note
• https://twitter.com/VulmonFeeds/status/2014299817732665398 · Twitter Post
• https://t.me/CVEtracker/42745 · Telegram Post