Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's temporary `umask` change affects other threads in multi-threaded environments. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Tarek Nakkouch for reporting this issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-03 | 4 | Disclosure4 |
| 2026-03-08 | 1 | Patch1 |
2 CVEs fixed in Django https://www.openwall.com/lists/oss-security/2026/03/03/3 CVE-2026-25673: DoS in URLField via Unicode normalization on Windows CVE-2026-25674: Potential incorrect permissions on newly created file system objects in multi-threaded environments
Post summary
The update announces that two Django CVEs have been fixed, providing brief technical details and a link to the advisory.
CVE-2026-25674 An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django a… https://www.cve.org/CVERecord?id=CVE-2026-25674
Post summary
A race condition vulnerability (CVE-2026-25674) affecting Django file‑system storage and cache backends was disclosed, with affected versions listed but no exploitation or patch details provided.
CVE-2026-25674 Race Condition in Django File-System Storage Causing Incorrect Permissions https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25674
Post summary
A race condition in Django’s file‑system storage leads to incorrect permissions, as disclosed in CVE‑2026‑25674.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-25674 - Potential incorrect permissions on newly created file system objects Intel Report: https://ift.tt/HNCs5O9
Post summary
The alert announces CVE-2026-25674, highlighting a potential incorrect permissions issue on newly created file system objects, with no PoC, exploit, or patch details provided.
🚨*CVE* CVE-2026-25674 An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django a… https://www.cve.org/CVERecord?id=CVE-2026-25674 ----- Traducción: CVE-2026-25674 Se … http://infoflow.cloud`
Post summary
The post announces CVE-2026-25674, a race condition in Django’s file‑system storage and cache backends, detailing affected versions but providing no PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | djangoproject | django | - | - | - |