CVE-2014-0012: FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local...

Security readout for executives and security teams

This issue affects Jinja2 2.7.2 bytecode caching. A local user on the same system could abuse unsafe temporary directory creation to gain privileges. The source record does not provide CVSS, broad affected-version details, or evidence of internet-scale exploitation. Exposure is most plausible on systems running Jinja2 2.7.2 with FileSystemBytecodeCache enabled in local multi-user or shared-host environments. The bundle does not prove exposure for later versions, downstream backports, or default application configurations. Treat as a targeted local privilege risk. It is not KEV-listed and has no supplied CVSS, but shared systems using affected Jinja2 caching should be reviewed and patched through normal vulnerability management. Mitigation focus: Check vendor or distribution guidance for the fixed Jinja2 package.; Upgrade Jinja2 if your installed package is affected.; Avoid FileSystemBytecodeCache in shared writable temporary locations until fixed..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.