A use-after-free vulnerability exists in QEMU's 9pfs subsystem due to a race condition between threads handling concurrent Tlcreate and Twalk requests. This flaw allows a malicious guest user to bypass directory traversal restrictions and escape the shared directory boundary, potentially leading to arbitrary host file read/write and code execution on the host as the QEMU process user. The vulnerability is fixed in version 8.2.0-94.oe2403sp3.