CVE-2022-21126

CVE-2022-21126 affects the samtools htsjdk package prior to version 3.0.1, stemming from a flaw in the createTempDir() function that fails to verify the existence of a temporary directory before creation, leading to insecure permissions. This vulnerability carries a high CVSS score of 7.8, indicating a local attack vector with low complexity, potentially resulting in high impacts to confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, suggesting a low immediate threat.