CVE-2019-3881

CVE-2019-3881 is a high-severity vulnerability affecting Bundler versions prior to 2.1.0, where it insecurely creates a predictable temporary directory for gems if the user's home directory is unavailable. This allows an unprivileged attacker to place malicious code in this directory, which Bundler would then load and execute. The vulnerability has a CVSS score of 7.8, indicating a high impact on confidentiality, integrity, and availability, with a local attack vector and low attack complexity requiring user interaction. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered some community discussion and media coverage, suggesting awareness.