AIKIDO-2026-473215

TL;DR

When tempfile.TemporaryDirectory encounters permission errors during cleanup, it can re-resolve paths after an attacker replaces a directory with a symlink, allowing cleanup to delete outside files or reset their permissions and file flags. Patched releases use directory file descriptors for safer cleanup where supported; platforms without symlink-safe shutil.rmtree may remain exposed to deletion, and file flags may still be reset outside the tree.