This vulnerability is a TOCTOU race condition in Samsung Open Source Escargot identified as CVE-2026-14160. It allows an attacker to exploit timing discrepancies between checking a condition and using a resource, potentially causing unintended behavior. The CVSS 3.1 base score is 5.9, reflecting local attack vector, low complexity, no privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. No remediation level or patch information is currently available, and no known exploits have been reported in the wild.

The vulnerability can lead to limited impacts on confidentiality, integrity, and availability of the affected system. Since the attack vector is local, an attacker must have local access to exploit this race condition. The medium severity score reflects moderate risk due to the local attack vector and potential for partial compromise or disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is provided, users should monitor Samsung Open Source advisories for updates. No specific mitigations are indicated in the available data.