CVE Catalog
CVE-2026-7837
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, potentially allowing a remote attacker to cause limited data modification under specific race conditions.
Risk Assessment
An attacker may be able to modify data under specific conditions, leading to integrity breaches in files shared via Netatalk.
Recommendation
Update Netatalk to version 4.4.3 or later which includes the fix.
Original NVD description (English source)
A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, which may allow a remote attacker to cause limited data modification under specific race conditions.