CVE-2021-26910

Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an OverlayFS mount operation.

• CWE-367

• http://www.openwall.com/lists/oss-security/2021/02/09/1Exploit, Mailing List, Patch, Third Party Advisory
• https://github.com/netblue30/firejail/commit/97d8a03cad19501f017587cc4e47d8418273834bPatch, Third Party Advisory
• https://github.com/netblue30/firejail/releases/tag/0.9.64.4Release Notes, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/02/msg00015.htmlThird Party Advisory
• https://security.gentoo.org/glsa/202105-19Third Party Advisory
• https://unparalleled.eu/blog/2021/20210208-rigged-race-against-firejail-for-local-root/Exploit, Third Party Advisory
• https://unparalleled.eu/publications/2021/advisory-unpar-2021-0.txtExploit, Third Party Advisory
• https://www.debian.org/security/2021/dsa-4849Third Party Advisory
• http://www.openwall.com/lists/oss-security/2021/02/09/1Exploit, Mailing List, Patch, Third Party Advisory
• https://github.com/netblue30/firejail/commit/97d8a03cad19501f017587cc4e47d8418273834bPatch, Third Party Advisory
• https://github.com/netblue30/firejail/releases/tag/0.9.64.4Release Notes, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/02/msg00015.htmlThird Party Advisory
• https://security.gentoo.org/glsa/202105-19Third Party Advisory
• https://unparalleled.eu/blog/2021/20210208-rigged-race-against-firejail-for-local-root/Exploit, Third Party Advisory
• https://unparalleled.eu/publications/2021/advisory-unpar-2021-0.txtExploit, Third Party Advisory
• https://www.debian.org/security/2021/dsa-4849Third Party Advisory

Published

Feb 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-26903LMA ISIDA Retriever 5.2 is vulnerable to XSS via query['text…6.1
• CVE-2021-26904LMA ISIDA Retriever 5.2 allows SQL Injection.9.8
• CVE-2021-269051Password SCIM Bridge before 1.6.2 mishandles validation of …6.5
• CVE-2021-26906An issue was discovered in res_pjsip_session.c in Digium Ast…5.9
• CVE-2021-26908Automox Agent prior to version 31 logs potentially sensitive…3.3
• CVE-2021-26909Automox Agent prior to version 31 uses an insufficiently pro…5.3
• CVE-2021-26911core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has M…7.4
• CVE-2021-26912NetMotion Mobility before 11.73 and 12.x before 12.02 allows…8.1
• CVE-2021-26913NetMotion Mobility before 11.73 and 12.x before 12.02 allows…8.1
• CVE-2021-26914NetMotion Mobility before 11.73 and 12.x before 12.02 allows…8.1
• CVE-2021-26915NetMotion Mobility before 11.73 and 12.x before 12.02 allows…8.1
• CVE-2021-26916In nopCommerce 4.30, a Reflected XSS issue in the Discount C…6.1