CVE-2026-7837 — TOCTOU with root privilege in ad_flush
A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, which may allow a remote attack…
Published: 2026-05-21 · CVSS: 3.7 · CVSS 3.1
A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, which may allow a remote attacker to cause limited data modification under specific race conditions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7