CVE-2017-8418: Rubocop Project Rubocop

Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days.

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.

Affected products

• Rubocop Project Rubocop: up to and including 0.48.1

Published 2017-05-02. Last modified 2026-06-17.