# Race condition.

Timing between concurrent operations that breaks a check. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user](https://agentprime.io/advisories/GHSA-mcr4-qmvw-px4g.md)
  `GHSA-mcr4-qmvw-px4g`, `CVE-2026-106451` · Maven `at.yawk.lz4:lz4-java` and 1 more: affected `<1.11.4`, fixed in `1.11.4` · CVSS 7.3 High · Not analysed yet · Published 7 Oct 2026 · Tags: Race condition, CWE-377
- [Ghost: Server-Side Request Forgery in Bookmark Fetching](https://agentprime.io/advisories/GHSA-322m-ff4g-9vx9.md)
  `GHSA-322m-ff4g-9vx9`, `BIT-ghost-2026-105647`, `CVE-2026-105647` · npm `ghost`: affected `>=6.54.1, <6.65.0`, fixed in `6.65.0` · CVSS 4.0 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [PraisonAI: Crawl4AI/Chromium backend is also affected by the \`web_crawl\` SSRF validation bypass](https://agentprime.io/advisories/GHSA-6g59-gm2v-qhvq.md)
  `GHSA-6g59-gm2v-qhvq`, `CVE-2026-61429`, `PYSEC-2026-4269` · PyPI `praisonaiagents`: affected `<1.6.78`, fixed in `1.6.78` · CVSS 8.4 High · Not analysed yet · Published 7 Oct 2026 · Tags: Information disclosure, Race condition, Server-side request forgery (SSRF)
- [Backstage: Improper task state validation in Scaffolder backend](https://agentprime.io/advisories/GHSA-xvgh-hmx8-9xxf.md)
  `GHSA-xvgh-hmx8-9xxf`, `CVE-2026-106500` · npm `@backstage/plugin-scaffolder-backend`: affected `<4.1.0`, fixed in `4.1.0` · CVSS 8.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: Path traversal, Race condition
- [MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests](https://agentprime.io/advisories/CVE-2026-107276.md)
  `CVE-2026-107276` · CVE record: MISP MISP · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Race condition
- [Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code](https://agentprime.io/advisories/CVE-2026-103435.md)
  `CVE-2026-103435` · CVE record: Anthropic @anthropic-ai/claude-code · CVSS 7.7 High · Not analysed yet · Published 7 Oct 2026 · Tags: Path traversal, Race condition, CWE-61
- [Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 Race Condition Restores Revoked Group Membership](https://agentprime.io/advisories/CVE-2026-105140.md)
  `CVE-2026-105140` · CVE record: obot-platform obot · CVSS 2.3 Low · Not analysed yet · Published 7 Oct 2026 · Tags: Race condition
- [Gitea push mirror SSRF and forced writes to internal Git hosts](https://agentprime.io/advisories/CVE-2026-89430.md)
  `CVE-2026-89430` · CVE record: Gitea Gitea · CVSS 8.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [Gitea migration and pull mirror SSRF through multi-answer DNS](https://agentprime.io/advisories/CVE-2026-101029.md)
  `CVE-2026-101029` · CVE record: Gitea Gitea · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure, Race condition, Server-side request forgery (SSRF)
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106385.md)
  `CVE-2026-106385` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106413.md)
  `CVE-2026-106413` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106207.md)
  `CVE-2026-106207` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106213.md)
  `CVE-2026-106213` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106201.md)
  `CVE-2026-106201` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106405.md)
  `CVE-2026-106405` · CVE record: Google Chrome · CVSS 6.0 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106300.md)
  `CVE-2026-106300` · CVE record: Google Chrome · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106238.md)
  `CVE-2026-106238` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106255.md)
  `CVE-2026-106255` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106426.md)
  `CVE-2026-106426` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106412.md)
  `CVE-2026-106412` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106377.md)
  `CVE-2026-106377` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Race condition in Google Android](https://agentprime.io/advisories/CVE-2026-56906.md)
  `CVE-2026-56906` · CVE record: Google Android · CVSS 7.0 High · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [BuildKit proxy CA cleanup can be disrupted by build steps](https://agentprime.io/advisories/CVE-2026-93315.md)
  `CVE-2026-93315` · CVE record: moby BuildKit · CVSS 5.8 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Race condition
- [Canimaan Software ClamXAV local privilege escalation](https://agentprime.io/advisories/CVE-2026-105773.md)
  `CVE-2026-105773` · CVE record: Canimaan Software ClamXAV · CVSS 7.3 High · Not analysed yet · Published 5 Oct 2026 · Tags: Race condition
- [Apache Struts: Shared message formatter exposes date and time values across concurrent requests](https://agentprime.io/advisories/CVE-2026-104714.md)
  `CVE-2026-104714` · CVE record: Apache Software Foundation Apache Struts · CVSS 8.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Race condition
- [Race condition in Google Android](https://agentprime.io/advisories/CVE-2026-58880.md)
  `CVE-2026-58880` · CVE record: Google Android · CVSS 7.0 High · Not analysed yet · Published 5 Oct 2026 · Tags: Race condition
- [Plane: InstanceAdminSignUpEndpoint TOCTOU race allows two concurrent unauthenticated callers to both bootstrap as Plane instance admins](https://agentprime.io/advisories/CVE-2026-104970.md)
  `CVE-2026-104970` · CVE record: makeplane plane · CVSS 8.1 High · Not analysed yet · Published 5 Oct 2026 · Tags: Race condition
- [Time-of-check Time-of-use (TOCTOU) Race Condition in Root Certificate Installation in Progress® Telerik® Fiddler® Classic](https://agentprime.io/advisories/CVE-2026-77804.md)
  `CVE-2026-77804` · CVE record: Progress Software Progress® Telerik® Fiddler® Classic · CVSS 6.6 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Race condition
- [LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit](https://agentprime.io/advisories/CVE-2026-105130.md)
  `CVE-2026-105130` · CVE record: laradashboard laradashboard · CVSS 6.3 Medium · Not analysed yet · Published 3 Oct 2026 · Tags: Race condition
- [Nezha 1.8.0 before 2.3.13 Deadlock DoS via notification-group endpoints](https://agentprime.io/advisories/CVE-2026-105112.md)
  `CVE-2026-105112` · CVE record: nezhahq nezha · CVSS 6.0 Medium · Not analysed yet · Published 3 Oct 2026 · Tags: Race condition
- [OpenLiteSpeed before 1.9.3 Local Privilege Escalation via lsup.sh Auto-Update](https://agentprime.io/advisories/CVE-2026-104474.md)
  `CVE-2026-104474` · CVE record: litespeedtech openlitespeed · CVSS 5.4 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Race condition
- [WordPress Booking Calendar plugin <= 11.8.4 - Race Condition vulnerability](https://agentprime.io/advisories/CVE-2026-39601.md)
  `CVE-2026-39601` · CVE record: WPdevelop Booking Calendar · CVSS 3.7 Low · Not analysed yet · Published 2 Oct 2026 · Tags: Race condition
- [Podgrab Unauthenticated DoS via Concurrent Map Access in WebSocket Handler](https://agentprime.io/advisories/CVE-2026-104057.md)
  `CVE-2026-104057` · CVE record: akhilrex podgrab · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Race condition
- [Ghost 0.5.0 before 6.23.0 Multiple Account Creation via Invite Token](https://agentprime.io/advisories/CVE-2026-103282.md)
  `CVE-2026-103282` · CVE record: TryGhost Ghost · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Race condition
- [MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass](https://agentprime.io/advisories/CVE-2026-103651.md)
  `CVE-2026-103651` · CVE record: MISP MISP · CVSS 7.6 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass, Race condition
- [Time-of-check time-of-use race condition in NVIDIA Virtual GPU Manager](https://agentprime.io/advisories/CVE-2026-47497.md)
  `CVE-2026-47497` · CVE record: NVIDIA Virtual GPU Manager · CVSS 7.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: Race condition
- [Race condition in NVIDIA GeForce and others](https://agentprime.io/advisories/CVE-2026-47565.md)
  `CVE-2026-47565` · CVE record: NVIDIA GeForce and 3 more · CVSS 6.4 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Race condition
- [Improper Synchronization in Monitoring in CODESYS Control Runtime](https://agentprime.io/advisories/CVE-2026-79625.md)
  `CVE-2026-79625` · CVE record: CODESYS Control RTE (SL) and 4 more · CVSS 7.2 High · Not analysed yet · Published 30 Sept 2026 · Tags: Race condition
- [Electron: Local race condition in Squirrel.Mac update installation on macOS](https://agentprime.io/advisories/GHSA-vv43-5jgx-7qv8.md)
  `GHSA-vv43-5jgx-7qv8`, `CVE-2026-102672` · npm `electron`: affected `<39.8.10 || >=40.0.0-alpha.1, <41.10.5 || >=42.0.0-alpha.1, <42.0.0-beta.2`, fixed in `39.8.10`, `41.10.5`, `42.0.0-beta.2` · CVSS 6.7 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-95344.md)
  `CVE-2026-95344` · CVE record: Google Chrome · CVSS 8.0 High · Not analysed yet · Published 29 Sept 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-95384.md)
  `CVE-2026-95384` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-95360.md)
  `CVE-2026-95360` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-95280.md)
  `CVE-2026-95280` · CVE record: Google Chrome · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Race condition
- [Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege Escalation](https://agentprime.io/advisories/CVE-2026-92369.md)
  `CVE-2026-92369` · CVE record: TeamViewer Full Client and 1 more · CVSS 7.3 High · Not analysed yet · Published 29 Sept 2026 · Tags: Race condition
- [Race condition, use-after-free in the Audio/Video component](https://agentprime.io/advisories/CVE-2026-100805.md)
  `CVE-2026-100805` · CVE record: Mozilla Thunderbird and 1 more · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Race condition, Memory corruption
- [Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass device handle access restrictions via a TOCTOU condition in…](https://agentprime.io/advisories/CVE-2026-79417.md)
  `CVE-2026-79417` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Broken access control, Race condition
- [Nezha before 2.3.1 Denial of Service via Concurrent Server Delete](https://agentprime.io/advisories/CVE-2026-101088.md)
  `CVE-2026-101088` · CVE record: nezhahq nezha · CVSS 6.0 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Race condition
- [Vulnerability-Lookup - Race Condition in Account Recovery Token Consumption Allows Password Takeover](https://agentprime.io/advisories/CVE-2026-101041.md)
  `CVE-2026-101041` · CVE record: vulnerability-lookup vulnerability-lookup · CVSS 6.3 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Race condition, CWE-20
- [Froxlor before 2.3.12 Privilege Escalation via SSH Key Sync](https://agentprime.io/advisories/CVE-2026-100713.md)
  `CVE-2026-100713` · CVE record: froxlor froxlor · CVSS 7.1 High · Not analysed yet · Published 26 Sept 2026 · Tags: Race condition
- [OpenClaw before 2026.7.1 Path Traversal via Filesystem Race](https://agentprime.io/advisories/CVE-2026-100597.md)
  `CVE-2026-100597` · CVE record: OpenClaw OpenClaw · CVSS 8.8 High · Not analysed yet · Published 26 Sept 2026 · Tags: Race condition
- [OpenClaw 2026.7.2 before 2026.9.2 Authentication Bypass via Voice Transcript](https://agentprime.io/advisories/CVE-2026-100546.md)
  `CVE-2026-100546` · CVE record: OpenClaw OpenClaw · CVSS 6.1 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Race condition
- [Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab](https://agentprime.io/advisories/CVE-2026-92628.md)
  `CVE-2026-92628` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 23 Sept 2026 · Tags: Race condition
- [9router: Image prefetch DNS rebinding allows SSRF to internal services](https://agentprime.io/advisories/GHSA-cmhj-wh2f-9cgx.md)
  `GHSA-cmhj-wh2f-9cgx`, `CVE-2026-56676` · npm `9router`: affected `<0.5.2`, fixed in `0.5.2` · CVSS 7.4 High · Not analysed yet · Published 23 Sept 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [Apache Tomcat: Stale HPACK emitter injects trailers into recycled pooled Request](https://agentprime.io/advisories/CVE-2026-77762.md)
  `CVE-2026-77762` · CVE record: Apache Software Foundation Apache Tomcat · CVSS 8.1 High · Not analysed yet · Published 23 Sept 2026 · Tags: Race condition
- [Reachy Mini Bluetooth PIN authentication can be bypassed by racing an authenticated device](https://agentprime.io/advisories/CVE-2026-96456.md)
  `CVE-2026-96456` · CVE record: Pollen Robotics Reachy Mini · CVSS 6.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass, Race condition
- [Foxit PDF Editor/Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-91813.md)
  `CVE-2026-91813` · CVE record: Foxit Software Inc. Foxit PDF Editor and 1 more · CVSS 8.8 High · Not analysed yet · Published 23 Sept 2026 · Tags: Race condition
- [Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service](https://agentprime.io/advisories/GHSA-xj3h-wwxq-gfcj.md)
  `GHSA-xj3h-wwxq-gfcj`, `CVE-2026-77633`, `GO-2026-6578` · Go `github.com/cloudreve/Cloudreve/v4`: affected `<4.0.0-20260715025621-7329602751c0`, fixed in `4.0.0-20260715025621-7329602751c0` · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2026 · Tags: Race condition, Denial of service
- [MCP Atlassian: Incomplete fix for CVE-2026-27826: DNS rebinding bypasses SSRF validation (validated IP not pinned)](https://agentprime.io/advisories/CVE-2026-77242.md)
  `CVE-2026-77242` · CVE record: sooperset mcp-atlassian · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [AT_SECURE programs may load attacker-controlled code via $ORIGIN](https://agentprime.io/advisories/CVE-2026-86805.md)
  `CVE-2026-86805` · CVE record: The GNU C Library glibc · CVSS 6.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Race condition
- [nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition](https://agentprime.io/advisories/GHSA-pxcx-fv34-x9p5.md)
  `GHSA-pxcx-fv34-x9p5`, `CVE-2026-61628`, `GO-2026-6540` · Go `github.com/lucasdillmann/nginx-ignition`: affected `<0.0.0-20260621194639-0586b4e55ab`, fixed in `0.0.0-20260621194639-0586b4e55ab` · CVSS 8.1 High · Not analysed yet · Published 21 Sept 2026 · Tags: Race condition

Newest: <https://agentprime.io/advisories/tag/race-condition.md>
Older: <https://agentprime.io/advisories/tag/race-condition.md?cursor=WyIyMDI2LTA5LTIxVDIxOjU0OjQyLjAwMDAwMFoiLCJHSFNBLXB4Y3gtZnYzNC14OXA1Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=race-condition&cursor=WyIyMDI2LTEwLTA3VDIwOjQyOjE5LjAwMDAwMFoiLCJHSFNBLXBjMzYtcXdqcS14NjhjIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/race-condition/?cursor=WyIyMDI2LTEwLTA3VDIwOjQyOjE5LjAwMDAwMFoiLCJHSFNBLXBjMzYtcXdqcS14NjhjIl0>. Everything for agents: <https://agentprime.io/llms.txt>.