boneIO Black has a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the create_timedatectl_sudoers_file() function. This function writes sudoers rules to a predictable temporary file, validates them, and then installs them with root privileges. A local attacker can exploit the race window between validation and installation or use the predictable filename for symlink attacks to inject arbitrary sudoers rules, leading to local privilege escalation to root. The issue is fixed in version 1.6.0.