Threats tagged 'bit-tomcat-2026-80353'

A time-of-check time-of-use (TOCTOU) race condition vulnerability exists in Apache Tomcat when creating Unix domain sockets for the APR/Native connector. This flaw allows an unauthorized local user to access the Unix domain socket. The previous fix for CVE-2026-65183 addressed only the NIO connector and did not resolve the issue in the APR/Native connector. The vulnerability affects Apache Tomcat versions from 9.0.47 through 9.0.122. Upgrading to version 9.0.123 resolves the issue.