CVE

CVE-2026-12345

View on NVD ↗

Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

Exploitation IoCs 2

Domain dv-g3b-emudhra[.]we-have-a-problem[.]com
SHA-256 fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70

MITRE ATT&CK TTPs 2

T1071.001
Web Protocols
Command And Control
 T1555
Credentials from Password Stores
Credential Access

Source Articles

eMudhra / emSign CA Compromise: What Python, pip, and CI/CD Users Need to Update
On October 20, 2026, Python's security team issued an advisory urging users to update Python packaging tools due to a compromise involving eMudhra/emSign CA intermediate certificates. The private keys for these intermediate CAs were generated with insufficient randomness, allowing potential attackers to forge certificates and impersonate HTTPS services during dependency downloads. This could enable man-in-the-middle attacks against tools like pip, uv, and conda that rely on certificate validation when fetching packages. Remediation requires updating to specific patched versions of certifi, pip, uv, conda, and other tools to ensure the affected certificate chains are no longer trusted.
step-security Oct 22, 2026