A use-after-free vulnerability in QEMU's 9pfs subsystem allows a race condition between threads processing concurrent Tlcreate and Twalk requests. This flaw enables a malicious guest user to bypass directory traversal restrictions and escape the shared directory boundary, potentially leading to arbitrary host file read/write and code execution as the QEMU process user. The vulnerability is fixed in version 8.2.0-63.oe2403sp1.