CVE-2026-86469

A race condition flaw in GLib2 's g_file_replace() function allows a local attacker with write access to the destination directory to redirect file writes to an arbitrary file. When the ".goutputstream-XXXXXX" temporary file creation fails, the library unlinks and recreates the destination withou...