Race condition.

yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

• Race condition
• CWE-377

<1.11.4 · fixed in 1.11.4

Ghost: Server-Side Request Forgery in Bookmark Fetching

• Race condition
• Server-side request forgery (SSRF)

>=6.54.1, <6.65.0 · fixed in 6.65.0

PraisonAI: Crawl4AI/Chromium backend is also affected by the `web_crawl` SSRF validation bypass

• Information disclosure
• Race condition

<1.6.78 · fixed in 1.6.78

Backstage: Improper task state validation in Scaffolder backend

• Path traversal
• Race condition

<4.1.0 · fixed in 4.1.0

MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests

• MISP
• Race condition

Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code

• @anthropic-ai/claude-code
• Path traversal
• Race condition

Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 Race Condition Restores Revoked Group Membership

• obot
• Race condition

Gitea push mirror SSRF and forced writes to internal Git hosts

• Gitea
• Race condition
• Server-side request forgery (SSRF)

Gitea migration and pull mirror SSRF through multi-answer DNS

• Gitea
• Information disclosure
• Race condition

Race condition in Google Chrome

• Google Chrome
• Race condition

Time-of-check time-of-use race condition in Google Chrome

• Google Chrome
• Race condition

Time-of-check time-of-use race condition in Google Chrome

• Google Chrome
• Race condition

Race condition in Google Chrome

• Google Chrome
• Race condition

Race condition in Google Chrome

• Google Chrome
• Race condition

Time-of-check time-of-use race condition in Google Chrome

• Google Chrome
• Race condition

Time-of-check time-of-use race condition in Google Chrome

• Google Chrome
• Race condition

Race condition in Google Chrome

• Google Chrome
• Race condition

Race condition in Google Chrome

• Google Chrome
• Race condition

Race condition in Google Chrome

• Google Chrome
• Race condition

Time-of-check time-of-use race condition in Google Chrome

• Google Chrome
• Race condition

Race condition in Google Chrome

• Google Chrome
• Race condition

Race condition in Google Android

• Google Android
• Race condition

BuildKit proxy CA cleanup can be disrupted by build steps

• moby BuildKit
• Race condition

Canimaan Software ClamXAV local privilege escalation

• Canimaan Software ClamXAV
• Race condition

Apache Struts: Shared message formatter exposes date and time values across concurrent requests

• Apache Software Foundation Apache Struts
• Race condition

Race condition in Google Android

• Google Android
• Race condition

Plane: InstanceAdminSignUpEndpoint TOCTOU race allows two concurrent unauthenticated callers to both bootstrap as Plane instance admins

• plane
• Race condition

Time-of-check Time-of-use (TOCTOU) Race Condition in Root Certificate Installation in Progress® Telerik® Fiddler® Classic

• Progress Software Progress® Telerik® Fiddler® Classic
• Race condition

LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit

• laradashboard
• Race condition

Nezha 1.8.0 before 2.3.13 Deadlock DoS via notification-group endpoints

• nezha
• Race condition

OpenLiteSpeed before 1.9.3 Local Privilege Escalation via lsup.sh Auto-Update

• litespeedtech openlitespeed
• Race condition

WordPress Booking Calendar plugin <= 11.8.4 - Race Condition vulnerability

• WPdevelop Booking Calendar
• Race condition

Podgrab Unauthenticated DoS via Concurrent Map Access in WebSocket Handler

• akhilrex podgrab
• Race condition

Ghost 0.5.0 before 6.23.0 Multiple Account Creation via Invite Token

• Ghost
• Race condition

MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass

• MISP
• Authentication bypass
• Race condition

Time-of-check time-of-use race condition in NVIDIA Virtual GPU Manager

• NVIDIA Virtual GPU Manager
• Race condition

Race condition in NVIDIA GeForce and others

• NVIDIA GeForce
• NVIDIA RTX, Quadro, NVS
• Race condition

Improper Synchronization in Monitoring in CODESYS Control Runtime

• CODESYS Control RTE (SL)
• CODESYS Control RTE (for Beckhoff CX) SL
• Race condition

Electron: Local race condition in Squirrel.Mac update installation on macOS

• Race condition

<39.8.10 || >=40.0.0-alpha.1, <41.10.5 || >=42.0.0-alpha.1, <42.0.0-beta.2 · fixed in 39.8.10, 41.10.5, 42.0.0-beta.2

Time-of-check time-of-use race condition in Google Chrome

• Google Chrome
• Race condition

Race condition in Google Chrome

• Google Chrome
• Race condition

Time-of-check time-of-use race condition in Google Chrome

• Google Chrome
• Race condition

Race condition in Google Chrome

• Google Chrome
• Race condition

Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege Escalation

• TeamViewer Full Client
• TeamViewer Host
• Race condition

Race condition, use-after-free in the Audio/Video component

• Mozilla Thunderbird
• Mozilla Firefox
• Race condition
• Memory corruption

Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass device handle access restrictions via a TOCTOU condition in…

• Broken access control
• Race condition

Nezha before 2.3.1 Denial of Service via Concurrent Server Delete

• nezha
• Race condition

Vulnerability-Lookup - Race Condition in Account Recovery Token Consumption Allows Password Takeover

• vulnerability-lookup
• Race condition
• CWE-20

Froxlor before 2.3.12 Privilege Escalation via SSH Key Sync

• froxlor
• Race condition

OpenClaw before 2026.7.1 Path Traversal via Filesystem Race

• OpenClaw
• Race condition

OpenClaw 2026.7.2 before 2026.9.2 Authentication Bypass via Voice Transcript

• OpenClaw
• Race condition

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab

• GitLab
• Race condition

9router: Image prefetch DNS rebinding allows SSRF to internal services

• Race condition
• Server-side request forgery (SSRF)

<0.5.2 · fixed in 0.5.2

Apache Tomcat: Stale HPACK emitter injects trailers into recycled pooled Request

• Apache Software Foundation Apache Tomcat
• Race condition

Reachy Mini Bluetooth PIN authentication can be bypassed by racing an authenticated device

• Pollen Robotics Reachy Mini
• Authentication bypass
• Race condition

Foxit PDF Editor/Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability

• Foxit Software Inc. Foxit PDF Editor
• Foxit Software Inc. Foxit PDF Reader
• Race condition

Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service

• Race condition
• Denial of service

<4.0.0-20260715025621-7329602751c0 · fixed in 4.0.0-20260715025621-7329602751c0

MCP Atlassian: Incomplete fix for CVE-2026-27826: DNS rebinding bypasses SSRF validation (validated IP not pinned)

• sooperset mcp-atlassian
• Race condition
• Server-side request forgery (SSRF)

AT_SECURE programs may load attacker-controlled code via $ORIGIN

• The GNU C Library glibc
• Race condition

nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition

• Race condition

<0.0.0-20260621194639-0586b4e55ab · fixed in 0.0.0-20260621194639-0586b4e55ab