CVE-2021-31154

CVE-2021-31154 describes a local privilege escalation vulnerability in pleaseedit_project pleaseedit versions prior to 0.4. The software uses predictable temporary filenames, enabling a local attacker to perform a symlink attack and gain full root privileges. This vulnerability carries a high CVSS score of 7.8, indicating significant impact (confidentiality, integrity, and availability) with low attack complexity and user interaction. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the potential for a local attacker to achieve root access makes this a notable security concern.