CVE-2020-11867: Audacityteam Audacity

Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.

Affected products

• Audacityteam Audacity: up to and including 2.3.3
• Fedoraproject Fedora: version 33 only; version 34 only

Published 2020-11-30. Last modified 2026-06-17.