CVE-2026-82543: Race Condition in vastsa FileCodeBox
Description
CVE-2026-82543 is a race condition vulnerability in vastsa FileCodeBox affecting versions up to 2.3. The flaw exists in the update_file_usage function within the Pickup Limit Handler component, specifically in the file apps/base/views.py. This vulnerability can be exploited remotely without authentication. A public exploit is available. Upgrading to version 2.5.0 resolves the issue.
CVSS v4.0
Score 6.9medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves a race condition in the update_file_usage function of the Pickup Limit Handler component in vastsa FileCodeBox (apps/base/views.py). Versions up to 2.3 are affected. The race condition can be triggered remotely without any privileges or user interaction, potentially leading to inconsistent or unintended behavior. The vulnerability is tracked as CVE-2026-82543 and has a CVSS v3.1 base score of 6.9 (medium severity). A patch identified by commit 8d7d856c62d73badd0797eb4daec8d2ff10a403a is included in version 2.5.0, which fixes the issue.
Potential Impact
The race condition may allow an attacker to manipulate file usage updates remotely, potentially causing inconsistent application state or other unintended effects. The vulnerability does not require privileges or user interaction, increasing its risk. However, the CVSS score and vendor information indicate a moderate impact level.
Mitigation Recommendations
Upgrade vastsa FileCodeBox to version 2.5.0 or later, which contains the official fix for this race condition vulnerability. No other mitigations are indicated or required as the patch fully resolves the issue.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-w3qf-xqhv-qhm8
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-82543"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a94611bacd9273b49c92489
Added to database: 08/30/2026, 16:58:03 UTC
Last enriched: 09/09/2026, 12:37:54 UTC
Last updated: 10/13/2026, 18:48:24 UTC
Views: 123
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.