CWE-367

Medium likelihood

Time-of-check Time-of-use (TOCTOU) Race Condition

Parent: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

649 vulnerabilities with CWE-367
CVE-2026-7837 LOW
Netatalk 3.0.0-4.4.2 and >=4.5.0 - Time-of-check Time-of-use Race Condition in ad_flush
CVSS 3.7
CVE-2026-29518 HIGH
Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write
CVSS 7.0
CVE-2026-43619 MEDIUM
Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls
CVSS 6.3
CVE-2026-41702 HIGH
VMware Fusion >=2025H2 <2026H1 - Privilege Escalation via SETUID Binary TOCTOU Race Condition
CVSS 7.8
CVE-2026-42592 MEDIUM
Gotenberg: DNS rebinding bypasses SSRF validation on Chromium URL conversion routes
CVSS 5.3
CVE-2026-41051 MEDIUM
csync2 uses insecure temporary directories when compiled with C99 or later
CVSS 5.0
CVE-2026-35418 HIGH
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-42344 MEDIUM
FastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpoints
CVSS 6.3
CVE-2026-44694 CRITICAL
n8n-MCP: Authenticated SSRF in n8n-mcp webhook and API client paths
CVSS 9.1
CVE-2026-34354 HIGH
Akamai Guardicore Platform Agent - Time-of-check Time-of-use (TOCTOU) Race Condition
CVSS 7.4
CVE-2026-43433 HIGH
rust_binder: avoid reading the written value in offsets array
CVSS 7.8
CVE-2026-43420 MEDIUM
ceph: fix i_nlink underrun during async unlink
CVSS 4.7
CVE-2026-41002 HIGH
Spring Cloud Config Race Condition in Git Repository Clone Directory
CVSS 7.2
CVE-2026-44113 HIGH
OpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS Bridge
CVSS 7.7
CVE-2026-44112 CRITICAL
OpenClaw < 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge Writes
CVSS 9.6
CVE-2026-43582 MEDIUM
OpenClaw < 2026.4.10 - DNS Rebinding SSRF via Hostname Validation Bypass
CVSS 6.3
CVE-2026-34596 HIGH
Sandboxie-Plus local privilege escalation via TOCTOU race condition in UpdUtil addon installation
CVSS 7.0
CVE-2026-7846 LOW
chatchat-space Langchain-Chatchat OpenAI-Compatible File Upload API openai_routes.py files toctou
CVSS 2.6
CVE-2026-43529 LOW
OpenClaw < 2026.4.10 - Time-of-Check-Time-of-Use (TOCTOU) Race Condition in exec Script Preflight Validator
CVSS 2.5
CVE-2026-6180 HIGH
PaperCut MF: Card truncation on HP readers
CVSS 8.1
CVE-2026-7791 HIGH
Amazon Workspaces < 2.6.2034.0 - Authenticated Local Privilege Escalation via Log Rotation Race Condition
CVSS 7.8
CVE-2026-7724 MEDIUM
PrefectHQ prefect Webhook/Notification validate_restricted_url toctou
CVSS 5.0
CVE-2026-37531 CRITICAL
AGL app-framework-main <=17.1.12 - Path Traversal
CVSS 9.8
CVE-2026-43053 MEDIUM
xfs: close crash window in attr dabtree inactivation
CVSS 4.7
CVE-2026-26206 MEDIUM
Wazuh: API brute-force protection bypass via race condition in login attempt tracking
CVSS 6.5
Details
Vulnerabilities 649
Exploit Likelihood Medium