Race Condition Vulnerability in GLib2 Affecting Local File Operations
CVE-2026-86469

5.3MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
7 September 2026

What is CVE-2026-86469?

A security flaw exists in GLib2 where the use of g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION can lead to a race condition. When the process of creating a temporary file fails, the library improperly unlinks the destination and recreates it. This operation lacks exclusive creation and symlink protection. A local attacker with write access to the destination directory can exploit this vulnerability to redirect the intended file write to a different file, potentially compromising data integrity and confidentiality.

References

https://access.redhat.com/security/cve/CVE-2026-86469
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2473839
issue-trackingx_refsource_REDHAT
https://gitlab.gnome.org/GNOME/glib/-/blob/main/gio/gloca...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Aisle Research for reporting this issue.
.