CVE-2026-112936: Python Sqlite Db Path Symlink Followingcve-2026-112936-python-sqlite-db-path-symlink-following
An attacker-influenceable filesystem path reaches sqlite3.connect() by name. SQLite opens and, with creation semantics, creates whatever the final path component points to at each connect, so a local attacker who can create names in the database directory can plant a symbolic link (redirecting database creation and locking, or splitting mutual exclusion betw
