VULNRABLE / Vulnerability / CVE-2026-112907
CVE-2026-112907
LOW LOW filelock GHSA
Exploit verdict: No active-exploit signal
CVSS Score
2
Severity
LOW
EPSS
—
Source
GHSA
Summary
filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break
What this means
CVE-2026-112907 is a low-severity vulnerability affecting filelock, rated CVSS 2. Published October 23, 2026.
View full advisory at GHSA →