This vulnerability is a TOCTOU race condition in Samsung Open Source Escargot identified as CVE-2026-14160. It allows an attacker to exploit timing discrepancies between checking a condition and using the result, potentially causing unintended behavior. The CVSS 3.1 base score is 5.9, reflecting low complexity attack vector (local), no privileges required, and impacts on confidentiality, integrity, and availability at a low level. The vulnerability affects the Escargot codebase at commit bab3a5797557014ce3c2e28419a6310cfba90d0d. No patch or official remediation has been published by the vendor as of the publication date.

The vulnerability can lead to limited unauthorized information disclosure, modification, or disruption of service due to the race condition. However, the impact is rated medium with low-level confidentiality, integrity, and availability impacts. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently available, monitoring vendor communications for updates is recommended. No specific mitigation steps are provided by the vendor at this time.