CVE-2026-74895: Dart Tempfile Write Before Chmod

Sensitive data is written to a temporary file before restrictive file permissions are set, exposing a race condition window where other local users can read the temporary file contents. Ensure restrictive permissions are applied to the directory or file prior to writing data.

Provally CuratedPublic repositoryMediumHigh confidenceVerifiedApache-2.0dart
greprules fetch cve-2026-74895-dart-tempfile-write-before-chmod --engine opengrep

Description

Sensitive data is written to a temporary file before restrictive file permissions are set, exposing a race condition window where other local users can read the temporary file contents. Ensure restrictive permissions are applied to the directory or file prior to writing data.