policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket.
Exploitability
AV:LAC:MAu:NImpact
C:NI:PA:P3.3/AV:L/AC:M/Au:N/C:N/I:P/A:P