CVE-2011-2185: Fabfile Fabric

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Fabric before 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on (1) a /tmp/fab.*.tar file or (2) certain other files in the top level of /tmp/.

Affected products

• Fabfile Fabric: up to and including 1.0.2; version 0.9 only; version 0.9.1 only; version 0.9.2 only; version 0.9.3 only; version 0.9.4 only; …

Published 2011-07-27. Last modified 2026-06-16.