A TOCTOU race condition vulnerability exists in tox-dev filelock versions from 3.20.4 up to but not including 4.2.1 on Windows. The issue involves the ReadWriteLock and AsyncReadWriteLock using SQLite database files in a way that allows a local attacker with write access to a shared directory to cause lock acquisition failures or trigger SQLite recovery file deletions. This requires a directory writable by another account, such as a shared temporary directory, and does not affect private directories. The vulnerability is fixed in version 4.2.1.
A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log
directory.
This issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).
Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attached devices after that check can keep the existing connection open while the peer continues trusting stale initial Evidence. This gap is especially significant for long-lived connections because the verifier has no mechanism to detect the changed state. This issue is fixed in version 0.9.0.
The Symfony HttpClient component NoPrivateNetworkHttpClient does not pin the checked IP address of cached hosts, allowing for DNS rebinding to bypass private network restrictions, resulting in enumeration of internal hosts and ports in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11.
NoPrivateNetworkHttpClient resolves the host of each request and checks the IP before connecting. It caches the result per host, and passes the IP to the decorated client through the resolve option so that the client connects to the exact IP that was checked. The issue is that resolve was only passed on the first lookup of a host: on subsequent requests, the decorated client resolved the host again on its own.
An attacker who controls a host's DNS can exploit this with DNS rebinding by answering the first lookup with a public IP, and subsequent lookups with a private IP, so when an application sends several requests to that host through the same client, the later requests connect to the private IP. This happens, for example, when an application fetches several URLs of a repository provided by a user. The check of the primary_ip in the on_progress callback still aborts the request before anything is sent, but the connection is made, and the error differs depending on whether the port is open or closed. This allows enumerating internal hosts and ports, as in CVE-2024-50342.
On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.
The vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration
Incorrect authorization due to a time-of-check to time-of-use (TOCTOU) race condition in the setACL request handling of Apache ZooKeeper.
When a node's ACL is changed via setACL, the pending change is not published to the server's outstanding change record for that node. Any request that is prepared (and authorized) after the setACL is submitted but before it commits is therefore checked against the previous, pre-revocation ACL, yet is applied to the data tree after the ACL change has taken effect. A client that currently holds a permission can use this window to perform operations requiring that permission through and after its revocation — for example, committing writes or deletes after losing write access, or re-granting itself full permissions, which persistently defeats the revocation. In deployments transitioning from the default OPEN_ACL_UNSAFE ACL to a restrictive ACL, any unauthenticated client can exploit this during the transition.
This issue affects Apache ZooKeeper up to and including 3.9.6. Users are recommended to upgrade to version 3.8.8 or 3.9.7, which fixes the issue.
CVE-2026-88968 is a high-severity vulnerability in anthropics claude-code versions prior to 2.1.251. The Edit tool improperly validates target paths and symlinks without binding to the underlying directory inode or file descriptor. On macOS, this allows attacker-controlled code running inside the Bash sandbox to replace a parent directory with a symlink after validation, leading to the Edit tool overwriting files outside the intended workspace. Exploitation requires code execution within the sandbox, such as from malicious repositories or dependency scripts. The issue is fixed in version 2.1.251.
WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated attackers to execute code on the server during the upgrade window.
CVE-2026-116250 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in pgAdmin 4 server mode prior to version 9.19. It allows an attacker with write access to the user's storage directory to exploit symbolic or hard links or FIFOs to read, write, or load files outside the intended storage directory with the privileges of the pgAdmin operating system account. Exploitation requires the ability to create such links or FIFOs in the storage directory and to win a race condition. The issue was fixed in pgAdmin 4 version 9.19 by securely opening files component-by-component with O_NOFOLLOW and passing open file descriptors to utilities.
CVE-2026-116240 is a path traversal vulnerability in pgAdmin 4 server mode before version 9.19. The issue arises because the path validation function check_access_permission() and the actual file operations use differently constructed paths, allowing attackers to access or manipulate files outside the intended user storage directory. This affects operations such as opening files in the Query Tool, listing folders, downloading, deleting, renaming files, and creating folders. The vulnerability does not affect desktop mode. It has a CVSS 3.1 score of 6.5 (medium severity).
A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.
CVE-2026-77059 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in boneIO versions 1.3.0 through before 1.6.0. It occurs in the create_timedatectl_sudoers_file() function, which writes sudoers rules to a predictable temporary file, validates them, then installs them with root privileges. An attacker with local access can exploit the race window or use symlink attacks to inject arbitrary sudoers rules, resulting in local privilege escalation to root. The issue is fixed in version 1.6.0.
A time-of-check to time-of-use (TOCTOU) race condition vulnerability exists in OpenReception's appointment booking software before version 2.2.2. This flaw allows an attacker to overbook an agent by placing multiple appointments into a single exclusive time slot through concurrent requests using a single booking token. The vulnerability compromises the integrity of the booking calendar and causes denial of availability to other clients. The issue has been fixed in version 2.2.2.
CVE-2026-105481 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in Node.js HTTP Agent connection reuse affecting versions 22.x, 24.x, and 26.x. It allows a client to accept a response sent before the client has sent the corresponding request due to incomplete handling of unsolicited responses in keep-alive sockets. This flaw is a regression or incomplete fix of a previous vulnerability (CVE-2026-48931).
PraisonAI versions from 4.5.126 up to but not including 4.6.59 contain a time-of-check to time-of-use (TOCTOU) race condition in the Async Jobs API webhook URL validation. The initial validation blocks loopback and private IP targets, but this check is not repeated at the time the webhook is sent. An attacker can exploit this by resolving the hostname to a public IP during validation and then to a loopback or private IP during webhook delivery, bypassing SSRF protections. This vulnerability is fixed in version 4.6.59.
CVE-2026-112941 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the tox-dev filelock Python package. Versions from 4.1.0 up to but not including 4.2.1 are affected. The issue involves SoftReadWriteLock and AsyncSoftReadWriteLock caching a successful check of the lock tree path and resolving its names again later, allowing a local attacker to replace the lock tree after initial acquisition and redirect lock-record writes to directories writable by the lock user. This vulnerability is fixed in version 4.2.1.
A TOCTOU race condition vulnerability exists in tox-dev's filelock Python package versions 4.1.0 through 4.2.0. The issue involves the ReadWriteLock removing a randomized .filelock-* private-hard-link directory during cleanup, which allows a local user with rename access in a non-sticky parent directory to interfere by observing or forging directory names, potentially causing unintended deletions. This vulnerability is fixed in version 4.2.1.
CVE-2026-112935 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the tox-dev filelock Python package. Versions from 3.22.0 up to but not including 4.2.1 are affected. The flaw allows two holders to be admitted simultaneously due to improper handling of stale markers and inode reuse, potentially leading to integrity issues. The vulnerability is fixed in version 4.2.1.
CVE-2026-80353 is a time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat affecting the APR/Native connector when creating Unix domain sockets. This flaw allows an unauthorized local user to access the Unix domain socket. The issue affects Apache Tomcat versions from 9.0.47 through 9.0.122 and was fixed in version 9.0.123.