CVE-2025-61659Medium· 6.8▾ Sunlitbash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 37.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 9.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.1%
bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-93864High· 7.1Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root
CVE-2026-76497Medium· 6.6Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities
CVE-2026-113713Medium· 4.4virtualenv: Temporary app-data can leave dangling seed package links
CVE-2025-14307High· 8.1An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6
CVE-2026-64672MediumTerragrunt catalog predictable temp symlink clobber
CVE-2026-55480Medium· 5.7OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems